From b94007092d3c1840bdbb268d246a32765b5d2014 Mon Sep 17 00:00:00 2001
From: dmlvr <lvr@dmlvr.com>
Date: Tue, 26 May 2026 11:40:22 +0300
Subject: [PATCH 1/3] test CSP testing

---
 .../TreeList/Overview/Angular/app/app.component.html     | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/apps/demos/Demos/TreeList/Overview/Angular/app/app.component.html b/apps/demos/Demos/TreeList/Overview/Angular/app/app.component.html
index dc1965d0aa5a..43b9526d7d28 100644
--- a/apps/demos/Demos/TreeList/Overview/Angular/app/app.component.html
+++ b/apps/demos/Demos/TreeList/Overview/Angular/app/app.component.html
@@ -70,11 +70,12 @@
   ></dxi-tree-list-column>
   <div *dxTemplate="let options of 'employeeTemplate'">
     @if(options.data.Task_Assigned_Employee) {
-    <img
+   <div
       class="img"
-      [src]="options.data.Task_Assigned_Employee.Picture"
-      alt=""
-    />
+      style.background-image="url('{{
+        options.data.Task_Assigned_Employee.Picture
+      }}')"
+    ></div>
     } @if(options.data.Task_Assigned_Employee) {
     <span class="name">{{ options.data.Task_Assigned_Employee.Name }}</span>
     }

From b35948f4d871c0856dde98acb7deff1809a36729 Mon Sep 17 00:00:00 2001
From: dmlvr <lvr@dmlvr.com>
Date: Tue, 26 May 2026 15:05:04 +0300
Subject: [PATCH 2/3] remove include for TreeList in CSP testing

---
 apps/demos/utils/server/csp-server.js | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/apps/demos/utils/server/csp-server.js b/apps/demos/utils/server/csp-server.js
index 79e3b800f4ec..0f59baad223c 100644
--- a/apps/demos/utils/server/csp-server.js
+++ b/apps/demos/utils/server/csp-server.js
@@ -171,9 +171,6 @@ const CSP_DEMO_ALLOWLIST = {
   'TreeList/WebAPIService': {
     'img-src': ['data:'],
   },
-  'TreeList/Overview': {
-    'img-src': ['data:'],
-  },
   // globalize/message.js uses new Function() internally
   'Localization/UsingGlobalize': {
     'script-src': ["'unsafe-eval'"],

From cc35eecc26e06858e387781198c9905f9e987888 Mon Sep 17 00:00:00 2001
From: dmlvr <lvr@dmlvr.com>
Date: Tue, 26 May 2026 15:29:07 +0300
Subject: [PATCH 3/3] return exclude

---
 apps/demos/utils/server/csp-server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/demos/utils/server/csp-server.js b/apps/demos/utils/server/csp-server.js
index 0f59baad223c..79e3b800f4ec 100644
--- a/apps/demos/utils/server/csp-server.js
+++ b/apps/demos/utils/server/csp-server.js
@@ -171,6 +171,9 @@ const CSP_DEMO_ALLOWLIST = {
   'TreeList/WebAPIService': {
     'img-src': ['data:'],
   },
+  'TreeList/Overview': {
+    'img-src': ['data:'],
+  },
   // globalize/message.js uses new Function() internally
   'Localization/UsingGlobalize': {
     'script-src': ["'unsafe-eval'"],