tree fd6f7cc09864f35b91aa49000adddc3d2b0808ef
parent e10f0176d66a2737edefec71f40376566769712b
author Ed Tanous <ed@tanous.net> 1711064126 -0700
committer Ed Tanous <ed@tanous.net> 1711067605 +0000

Fix content-security-policy disable

If one sets the XSS policy disable, and tries to load the webui, they're
met with the following error message:

```
chunk-vendors.6cfb4b74.js:36 Refused to load the image
'data:image/svg+xml;charset=utf-8,%3Csvg
xmlns='http://www.w3.org/2000/svg' width='4' height='5'%3E%3Cpath
fill='%233f3f3f' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E' because it
violates the following Content Security Policy directive: "img-src *".
Note that '*' matches only URLs with network schemes ('http', 'https',
'ws', 'wss'), or URLs whose scheme matches `self`'s scheme. The scheme
'data:' must be added explicitly.
```

Do as it asks, and add data: to the content security policy.

Tested: Browser console no longer shows error when XSS is enabled.

Change-Id: I17f70d7c87a284b33ef6eb5a01a01c23a14898c9
Signed-off-by: Ed Tanous <ed@tanous.net>