Hi Team,
We are attempting to display an image retrieved from an external API call (Azure DevOps) within a modal in our Forge Jira app (Custom UI). However, the image is not rendering — only the “alt” text or logo is being displayed. Could you please advise on how we can resolve this issue?
Forge Custom UI has a Content Security Policy that restricts loading external resources
You must list any domains you load images from in your manifest.yml
under resources.external
and permissions.external
Hi @ShivamMaurya
Thanks for your response.
We tried providing permissions to external domain in the manifest. Below is the code snippet used in the manifest.
Please let me know if we missed any.
Thanks for sharing the manifest. You’ve configured external.images
correctly, but Azure DevOps images require authentication, which the browser can’t send via <img>
.
To resolve this, fetch the image in a Forge resolver using your Azure credentials, convert it to a base64 string, and return it to the frontend. Then render it using a data:
URI in your <img>
tag.