chore: image allow "data:" in csp (#19728)

web/middleware.ts

     style-src 'self' 'unsafe-inline' ${scheme_source} ${whiteList};
     worker-src 'self' ${scheme_source} ${csp} ${whiteList};
     media-src 'self' ${scheme_source} ${csp} ${whiteList};
-    img-src *;
+    img-src * data:;
     font-src 'self';
     object-src 'none';
     base-uri 'self';