CSP hint: unique origins aren't hierarchical, so don't add slashes, *, etc. when declaring as a scheme-source. Just "data:" "blob:", etc.
@hillbrad http://www.w3.org/TR/CSP/#match-source-expression … step 4.4 first looks like it would block this, but it refers to the scheme of URL's origin, which is https
-
-
@hillbrad Ah, nvm. Didn't realize that you can't just use Blob URIs from another origin.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.