The ideal Answer listed here needs to be: img-src 'self' info:image/svg+xml. If it won't do the job attempt: img-src 'self' information:Contemplate altering it if you still have your directive as img-src * 'self' data: https:; Chrome, Opera, and Edge have a secure term You need to use to bypass this https://saptraining34556.blog-mall.com/38039438/the-5-second-trick-for-accessory-boxes