supabase / supabase / 41598031277

87%

push

github

fix(studio): stop csp-blocked images from failing feedback screenshots (#52590)

## Problem

- "Capture screenshot" in the studio feedback widget fails in
production, and studio shows the "Failed to capture screenshot" toast
- `html-to-image` downloads each image with `fetch()`, and the csp
`connect-src` does not allow the github and google avatar hosts
- the blocked avatar gets an empty `src`, so its `onerror` rejects the
whole capture

## Solution

- changes the capture to use a transparent pixel for each image that it
cannot download, so a blocked avatar shows blank and the screenshot
still completes

| state | preview |
| -------|------|
| before | <img width="600" height="280" alt="image"
src="https://github.com/user-attachments/assets/53c5916e-cd37-4fb5-8989-070537aa9f76"
/> |

<!--
## Preview links

If relevant, include links to changed pages for easy review access.

Copy the preview base URL from the Vercel bot comment on this PR. Use
the following table as an example template.

| Site | Live | Preview | Search for |
| -------------- |
-------------------------------------------------------------------------
|
------------------------------------------------------------------------------------------------------------
| ----------------------------- |
| WWW | [/blog/your-post](https://supabase.com/blog/your-post) |
[/blog/your-post](https://zone-www-dot-com-git-branch-name-supabase.vercel.app/blog/your-post)
| unique phrase from the change |
| Docs |
[/docs/guides/your-page](https://supabase.com/docs/guides/your-page) |
[/docs/guides/your-page](https://docs-git-branch-name-supabase.vercel.app/docs/guides/your-page)
| unique phrase from the change |
| Studio | [/dashboard](https://supabase.com/dashboard) |
[/dashboard](https://studio-git-branch-name-supabase.vercel.app/dashboard)
| unique phrase from the change |
| Design system | [/design-system](https://supabase.com/design-system) |
[/design-system](https://design-system-git-branch-name-supaba... (continued)

1986 of 2356 branches covered (84.3%)

Branch coverage included in aggregate %.

2794 of 3152 relevant lines covered (88.64%)

195.77 hits per line