From d58cb75e534280a2642732bd83ef71953f5e86cd Mon Sep 17 00:00:00 2001
From: the-djmaze <>
Date: Tue, 14 Feb 2023 20:12:16 +0100
Subject: [PATCH] Resolve #958

---
 snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php b/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php
index 1e9761635..9b4542d44 100644
--- a/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php
+++ b/snappymail/v/0.0.0/app/libraries/snappymail/http/csp.php
@@ -9,7 +9,7 @@ class CSP
 {
 	public
 		$base = ["'self'"],
-		$default = ["'self'"],
+		$default = ["'self'", 'data:'],
 		// Knockout.js requires eval() for observable binding purposes
 		// Safari < 15.4 does not support strict-dynamic
 //		$script  = ["'strict-dynamic'", "'unsafe-eval'"],