diff --git a/app/Http/Middleware/SecureHeaders.php b/app/Http/Middleware/SecureHeaders.php
index 2b9f1fd..633ec2b 100644
--- a/app/Http/Middleware/SecureHeaders.php
+++ b/app/Http/Middleware/SecureHeaders.php
@@ -45,8 +45,8 @@ class SecureHeaders
         $cspPolicies = [
             "default-src 'none';",
             // * CKEDITOR Specific https://ckeditor.com/docs/ckeditor5/latest/installation/advanced/csp.html
-            "connect-src 'self';",
-            "img-src * data:;",
+            "connect-src 'self' blob:;",
+            "img-src * data: blob:;",
             "frame-src https://www.youtube.com;",
             "font-src 'self' data:;",
             // ! Using CKEditor wiill must have unsafe-inline style