title: Violates the following Content Security Policy directive
body: <p>When I upload an image into my web application, it is showing the below error</p>
  <blockquote>
  <p>Refused to load the image ' <code>&lt;URL&gt;</code> because it violates the following Content Security Policy directive: &quot;default-src * data: 'unsafe-eval' 'unsafe-inline'&quot;. Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.</p>
  </blockquote>
  <p>I try to solve this error by using the following code</p>
  <pre><code>  &lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;default-src *; img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' *&quot;&gt;
    &lt;meta charset=&quot;utf-8&quot;&gt;
    &lt;meta http-equiv=&quot;X-UA-Compatible&quot; content=&quot;IE=edge&quot;&gt;
  </code></pre>
  <p>But it is not working. How can I fix this problem?</p>