1 files changed, 2 insertions, 1 deletions

diff --git a/subprojects/language-web/src/main/java/tools/refinery/language/web/SecurityHeadersFilter.java b/subprojects/language-web/src/main/java/tools/refinery/language/web/SecurityHeadersFilter.java
index fab94689..cc87917f 100644
--- a/subprojects/language-web/src/main/java/tools/refinery/language/web/SecurityHeadersFilter.java
+++ b/subprojects/language-web/src/main/java/tools/refinery/language/web/SecurityHeadersFilter.java
@@ -23,7 +23,8 @@ public class SecurityHeadersFilter implements Filter {
                                         // Use 'data:' for displaying inline SVG backgrounds.
                                         "img-src 'self' data:; " +
                                         "font-src 'self'; " +
-                                        "connect-src 'self'; " +
+                                        // Fetch data:application/octet-stream;base64 URIs to unpack compressed URL fragments.
+                                        "connect-src 'self' data:; " +
                                         "manifest-src 'self'; " +
                                         "worker-src 'self' blob:;");
                         httpResponse.setHeader("X-Content-Type-Options", "nosniff");