three.js “blob” memory required for 3D graphics – .htaccess

Back

What I changed:

  1. img-src: Added blob: (This allows Three.js to show textures).
  2. connect-src: Added blob: (This allows the game to load the 3D data).
  3. script-src: Added blob: (Backup for workers).
  4. worker-src: Added worker-src ‘self’ blob:; (This allows the Draco decoder to decompress your models).

How to apply:

  1. Copy the new line above.
  2. Paste it into your .htaccess file, replacing the old Header set Content-Security-Policy line.
  3. Save the file.
  4. Clear your browser cache (or open the site in an Incognito/Private window).

The game should now load perfectly because the browser finally has permission to use the “blob” memory required for 3D graphics.

Header set Content-Security-Policy "default-src 'self' https: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' https: data:; media-src 'self' https:; frame-src 'self' https:; connect-src 'self' https: blob:; worker-src 'self' blob:;"