[APP-4348] add blob to img-src to fix CSP issue encountered by a cust…

…omer (#118)

charts/datafold/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: datafold
 description: Helm chart package to deploy Datafold on kubernetes.
 type: application
-version: 0.6.46
+version: 0.6.47
 appVersion: "1.0.0"
 icon: https://www.datafold.com/logo.png
 

charts/datafold/values.yaml

@@ -108,7 +108,7 @@ config:
   alertsWithMultiDimAndMultiField: ""
   enableGraphInvariantsChecks: "false"
   lineageTestingDb: ""
-  contentSecurityPolicy: "default-src 'self'; connect-src 'self' *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com raw.githubusercontent.com api.perfalytics.com perfalytics.com api.avo.app track.customer.io www.google-analytics.com browser-http-intake.logs.datadoghq.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com forms.hubspot.com wss://*.hotjar.com *.hotjar.io *.analytics.google.com *.g.doubleclick.net api.amplitude.com; style-src 'self' 'unsafe-inline' *.getbeamer.com fonts.googleapis.com *.usepylon.com *.posthog.com *.pusher.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com perfalytics.com assets.customer.io *.hs-scripts.com js.hs-scripts.com js.hs-banner.com js.hscollectedforms.net www.google-analytics.com js.hs-analytics.net https://www.google-analytics.com *.googletagmanager.com *.hotjar.com cdn.jsdelivr.net cdn.amplitude.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com; img-src 'self' http: https: data:; object-src 'none'; frame-ancestors 'none'; worker-src 'self' blob:; frame-src 'self' *.getbeamer.com calendly.com;"
+  contentSecurityPolicy: "default-src 'self'; connect-src 'self' *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com raw.githubusercontent.com api.perfalytics.com perfalytics.com api.avo.app track.customer.io www.google-analytics.com browser-http-intake.logs.datadoghq.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com forms.hubspot.com wss://*.hotjar.com *.hotjar.io *.analytics.google.com *.g.doubleclick.net api.amplitude.com; style-src 'self' 'unsafe-inline' *.getbeamer.com fonts.googleapis.com *.usepylon.com *.posthog.com *.pusher.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com perfalytics.com assets.customer.io *.hs-scripts.com js.hs-scripts.com js.hs-banner.com js.hscollectedforms.net www.google-analytics.com js.hs-analytics.net https://www.google-analytics.com *.googletagmanager.com *.hotjar.com cdn.jsdelivr.net cdn.amplitude.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.getbeamer.com *.usepylon.com *.posthog.com *.pusher.com; img-src 'self' http: https: data: blob:; object-src 'none'; frame-ancestors 'none'; worker-src 'self' blob:; frame-src 'self' *.getbeamer.com calendly.com;"
   customerAdaptation: ""
   customVars: []