Content-Security-Policy (CSP): how to allow svg image in object
问题 I am using the js plugin that adds inside itself SVG images. I have added CSP policy to my website, but I can't configure it to allow plugin's code. Its code looks like: label=$("<object style='height:10px; width:10px;' type='image/svg+xml' data='data:image/svg+xml;charset=UTF-8," + "<svg xmlns=\"http://www.w3.org/2000/svg\">" + "<rect x=\"0\" y=\"0\" some parameters/>"+ "<text>SomeText</text></svg>'></object>"); el.html(label) I am looking for a configuration that allows SVG image that is