getContentSecurityPolicyManager(); $csp = new \OCP\AppFramework\Http\EmptyContentSecurityPolicy(); $csp->addAllowedStyleDomain('\'self\''); $csp->addAllowedStyleDomain('blob:'); $csp->addAllowedScriptDomain('\'self\''); $csp->addAllowedFrameDomain('\'self\''); $csp->addAllowedChildSrcDomain('\'self\''); $csp->addAllowedImageDomain('blob:'); $manager->addDefaultPolicy($csp); }