thinginab

I could be wrong, but I think this case I added might have the same cause - /preview isn't in the initial CSP header but /content is, which I think...

> The more I think about this the less I like my ideas of a client-side /self endpoint or appending an object to window. Yall are making good points. I...

Just further context. This simple html also fails in /preview or /inscription but works in /content `download` Error: Content-Security-Policy: The page’s settings blocked the loading of a resource at data:image/png;base64,iVBORw0KGgoAAAANSU…...

did I miss anything here?