fix assets

chrome/browser/browser_resources.grd

@@ -153,6 +153,7 @@
         <include name="IDR_MILLIX_APP_ROBOTO_MEDIUM_WOFF2" file="resources\millix\app\static\media\roboto_medium.woff2" type="BINDATA" />
         <include name="IDR_MILLIX_APP_ROBOTO_REGULAR_WOFF" file="resources\millix\app\static\media\roboto_regular.woff" type="BINDATA" />
         <include name="IDR_MILLIX_APP_ROBOTO_REGULAR_WOFF2" file="resources\millix\app\static\media\roboto_regular.woff2" type="BINDATA" />
+        <include name="IDR_MILLIX_APP_UPLOAD_ICON_SVG" file="resources\millix\app\static\media\UploadIcon.svg" type="BINDATA" />
       </if>
       <include name="IDR_AD_NETWORK_HASHES" file="resources\ad_networks.dat" type="BINDATA" />
       <if expr="is_posix and not is_macosx">

chrome/browser/ui/webui/millix/untrusted_millix_app.cc

@@ -41,6 +41,7 @@ UntrustedMillixAppUI::UntrustedMillixAppUI(content::WebUI* web_ui)
   untrusted_source->AddResourcePath("static/media/roboto_medium.woff", IDR_MILLIX_APP_ROBOTO_MEDIUM_WOFF2);
   untrusted_source->AddResourcePath("static/media/roboto_regular.woff", IDR_MILLIX_APP_ROBOTO_REGULAR_WOFF);
   untrusted_source->AddResourcePath("static/media/roboto_regular.woff", IDR_MILLIX_APP_ROBOTO_REGULAR_WOFF2);
+  untrusted_source->AddResourcePath("static/media/UploadIcon.svg", IDR_MILLIX_APP_UPLOAD_ICON_SVG);
 
   untrusted_source->SetDefaultResource(IDR_MILLIX_APP_UNTRUSTED_HTML);
 
@@ -52,6 +53,9 @@ UntrustedMillixAppUI::UntrustedMillixAppUI(content::WebUI* web_ui)
   untrusted_source->OverrideContentSecurityPolicy(
         network::mojom::CSPDirectiveName::DefaultSrc, "default-src 'self' 'unsafe-inline';");
 
+  untrusted_source->OverrideContentSecurityPolicy(
+        network::mojom::CSPDirectiveName::DefaultSrc, "img-src 'self' data: blob:;");
+
   untrusted_source->OverrideContentSecurityPolicy(
       network::mojom::CSPDirectiveName::ScriptSrc, "script-src tangled://resources 'self' 'unsafe-inline';");
   untrusted_source->AddFrameAncestor(GURL(chrome::kChromeUIMillixAppURL));