img-src was missing blob:, so the Cropper <img> (URL.createObjectURL → blob:)
was silently blocked by CSP → no image visible. Added blob: to img-src (media-src
already had it for audio). + onerror fallback in the editor: if the image fails
to load, the original is uploaded instead of getting stuck.
Co-Authored-By: Claude <noreply@…>
(No files)
Note:
See TracChangeset
for help on using the changeset viewer.