# Jira priorities Icon Security Policy directive: "img-src 'self' data: blob:

**URL:** <https://community.developer.atlassian.com/t/jira-priorities-icon-security-policy-directive-img-src-self-data-blob/57201>\
**Category:** Forge UI Kit and Custom UI\
**Tags:** react, svg\
**Created:** [April 2, 2022, 7:55pm UTC](https://community.developer.atlassian.com/t/jira-priorities-icon-security-policy-directive-img-src-self-data-blob/57201 "2022-04-02T19:55:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bongartz](https://avatars.discourse-cdn.com/v4/letter/b/e79b87/32.png) [@bongartz](https://community.developer.atlassian.com/u/bongartz)\
**Post date:** [April 2, 2022, 7:55pm UTC](https://community.developer.atlassian.com/t/jira-priorities-icon-security-policy-directive-img-src-self-data-blob/57201/1 "2022-04-02T19:55:22Z")

</div>

Hi,

I want use the iconUrl from the priorities from a issue, but if I want load this in my react app I get this Error

```auto
Refused to load the image 'https://subdomain.atlassian.net/images/icons/priorities/medium.svg' because it violates the following Content Security Policy directive: "img-src 'self' data: blob: https://secure.gravatar.com https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net https://api.atlassian.com".

```

here my manifest

```auto
permissions:
  external:
    images:
      - 'https://subdomain.atlassian.net/images/icons/priorities/medium.svg'

```

Thank you

---

<div class="post-metadata">

**Author:** ![danielwester](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/danielwester/32/36730_2.png) [@danielwester](https://community.developer.atlassian.com/u/danielwester)\
**Post date:** [April 3, 2022, 1:49am UTC](https://community.developer.atlassian.com/t/jira-priorities-icon-security-policy-directive-img-src-self-data-blob/57201/2 "2022-04-03T01:49:41Z")

</div>

Have you deployed to the environment (and if it’s production - has the admin clicked upgrade)?

---

<div class="post-metadata">

**Author:** ![bongartz](https://avatars.discourse-cdn.com/v4/letter/b/e79b87/32.png) [@bongartz](https://community.developer.atlassian.com/u/bongartz)\
**Post date:** [April 3, 2022, 6:49am UTC](https://community.developer.atlassian.com/t/jira-priorities-icon-security-policy-directive-img-src-self-data-blob/57201/3 "2022-04-03T06:49:02Z")

</div>

Yes thank you. This was the solution.