From 3298dc3e778eb754d64162343af219d2b2bf5397 Mon Sep 17 00:00:00 2001
From: 3252a8 <3252a8@proton.me>
Date: Sat, 16 May 2026 00:04:42 +0300
Subject: [PATCH] test: align CSP expectation with current img-src that allows
 blob

---
 tests/test_security.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/test_security.py b/tests/test_security.py
index 7242b94..7459ad9 100644
--- a/tests/test_security.py
+++ b/tests/test_security.py
@@ -373,7 +373,7 @@ class WebAppSecurityTests(unittest.IsolatedAsyncioTestCase):
         csp = response.headers["Content-Security-Policy"]
 
         self.assertNotIn("'unsafe-eval'", csp)
-        self.assertIn("img-src 'self' data: https:;", csp)
+        self.assertIn("img-src 'self' data: blob: https:;", csp)
         self.assertNotIn("img-src 'self' data: https: http:;", csp)