de> attribute values comply with the default-src policy, or you need to add a <code>img-src</code> directive to your CSP policy.</p>

<p>Here are some example of what you might see in the console when images are blocked from loading by a CSP policy with a <code>default-src</code> policy set:</p>

<blockquote>
	refused to load the image because it violates the following content security policy directive: "default-src 'none'". note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.