# Thumbnail not displaying in Uppy dashboard?

**URL:** <https://community.transloadit.com/t/thumbnail-not-displaying-in-uppy-dashboard/15220>\
**Category:** Uppy\
**Created:** [March 5, 2020, 5:44am UTC](https://community.transloadit.com/t/thumbnail-not-displaying-in-uppy-dashboard/15220 "2020-03-05T05:44:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jbmulligan](https://avatars.discourse-cdn.com/v4/letter/j/8797f3/32.png) [@jbmulligan](https://community.transloadit.com/u/jbmulligan)\
**Post date:** [March 5, 2020, 5:44am UTC](https://community.transloadit.com/t/thumbnail-not-displaying-in-uppy-dashboard/15220/1 "2020-03-05T05:44:36Z")

</div>

I am a newbie Uppy user. After a little fiddling, I have the Uppy dashboard integrated into my web page, and uploading files with the help of a locally-running tusd server. However, there is one problem that I haven’t been able to figure out: the thumbnails are not displaying, and in the javascript console I am seeing error messages like:

Refused to load the image ‘blob:https:/ /localhost:3010/3c7a66cf-4265-4241-a87b-49f0ec5614f7’ because it violates the following Content Security Policy directive: “img-src ‘self’ data: https:/ /localhost:3010/ https: http:”.

(https:/ /localhost:3010/ is my local web server). The string “blob:https:” looks a little strange, is that what it is supposed to be? I tried prepending the string “blob:” to “https:/ /localhost:3010/” in the place were the content security policy is defined, but the result was the same. I looked around to see if there was a file with that long series of hex groups for a name, but didn’t find it. Can someone give me a short answer for how this is supposed to work or offer an idea for what I might be doing wrong?

Thanks in advance! Uppy looks like a great component so I am hoping to get it working with all its features.

-Jeff

---

<div class="post-metadata">

**Author:** ![jbmulligan](https://avatars.discourse-cdn.com/v4/letter/j/8797f3/32.png) [@jbmulligan](https://community.transloadit.com/u/jbmulligan)\
**Post date:** [March 5, 2020, 5:45am UTC](https://community.transloadit.com/t/thumbnail-not-displaying-in-uppy-dashboard/15220/2 "2020-03-05T05:45:50Z")

</div>

Note: I put a space in between the two slashes in [https://localhost](https://localhost) because the first time I tried to post I was told that a new user could only have two links… So those are intentional typos.

---

<div class="post-metadata">

**Author:** ![jbmulligan](https://avatars.discourse-cdn.com/v4/letter/j/8797f3/32.png) [@jbmulligan](https://community.transloadit.com/u/jbmulligan)\
**Post date:** [March 5, 2020, 8:05am UTC](https://community.transloadit.com/t/thumbnail-not-displaying-in-uppy-dashboard/15220/3 "2020-03-05T08:05:04Z")

</div>

Solved it! The solution was simply to include “blob:” in the img-src content security policy. I found the answer here: [https://stackoverflow.com/questions/59484216/refused-to-load-the-image-blob-because-it-violates-the-following-content-s](https://stackoverflow.com/questions/59484216/refused-to-load-the-image-blob-because-it-violates-the-following-content-s)