diff --git a/lib/web_ui/flutter_js/src/trusted_types.js b/lib/web_ui/flutter_js/src/trusted_types.js index 76db604dbaf17..eeeef9a1ba16d 100644 --- a/lib/web_ui/flutter_js/src/trusted_types.js +++ b/lib/web_ui/flutter_js/src/trusted_types.js @@ -20,6 +20,11 @@ export class FlutterTrustedTypesPolicy { if (window.trustedTypes) { this.policy = trustedTypes.createPolicy(policyName, { createScriptURL: function (url) { + // Return blob urls without manipulating them + if (url.startsWith('blob:')) { + return url; + } + // Validate other urls const parsed = new URL(url, window.location); const file = parsed.pathname.split("/").pop(); const matches = patterns.some((pattern) => pattern.test(file));