CSP blocking things it shouldn't

I’m getting reports that say our CSP policy is blocking domains it looks like it shouldn’t.

blocked-uri: https://uploads.....  
effective-directive: img-src
original-policy: img-src 'self' https: blob: data:;

Why is the policy blocking the blocked-uri?

I have a few different domains that seem like they should be allowed, but aren’t.

You need to sign in to view this answers