Index: openacs-4/packages/richtext-tinymce/tcl/richtext-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/richtext-tinymce/tcl/richtext-procs.tcl,v
diff -u -r1.6 -r1.7
--- openacs-4/packages/richtext-tinymce/tcl/richtext-procs.tcl	11 Sep 2024 06:15:53 -0000	1.6
+++ openacs-4/packages/richtext-tinymce/tcl/richtext-procs.tcl	11 Sep 2024 15:34:50 -0000	1.7
@@ -299,6 +299,12 @@
             -src urn:ad:js:tinymce \
             -order ${order}.1
 
+        #
+        # TinyMCE transparently copy-pastes images as blobs into the
+        # content.
+        #
+        security::csp::require img-src blob:
+
         if {!$init_p} {
             #
             # We just want the header stuff.