This issue arose for me and the problem was that in my settings the home url and site url had not been changed to https even though ssl/tls was configured a long time ago.
Fixing this resolved the content security policy from blocking (as we have https: allowed for image-src)
This reply was modified 2 years, 12 months ago by djones4822.