how to handle data:image/gif;base64,

"content_security_policy": "script-src 'self' https://ssl.google-analytics.com; object-src 'self'; img-src: 'self' data:"

Lot more coming in this line. Stay tuned...