Update CSP for ExamTemplatesController and GroupsController

[mrafie1]

Proposed Changes

• Removed :blob CSP exception for images in app/controllers/exam_templates_controller.rb and app/controllers/groups_controller.rb

Reasoning:

Both controllers take in files (data.fileLink or path) as URLs

_assign_errors.js.erb which displays PDFs for exam_templates_controller

assigns_scans.html.erb which displays PDFs for groups_controller

PDFViewer itself does not convert PDFs into blobs: it keeps the URL.

pdf_viewer.jsx file and its function loadPDFFile

Additionally, when viewing PDF files, they are not converted into "blob" images; they keep their original file link.

Since blob is not being used by PDFViewer and the image is kept as its original link by the exam_templates_controller and `groups_controller, it is safe to remove it from the CSP.

Screenshots of your changes (if applicable)

Type of Change

(Write an X or a brief description next to the type or types that best describe your changes.)

Type	Applies?
🚨 Breaking change (fix or feature that would cause existing functionality to change)
✨ New feature (non-breaking change that adds functionality)
🐛 Bug fix (non-breaking change that fixes an issue)
🎨 User interface change (change to user interface; provide screenshots)
♻️ Refactoring (internal change to codebase, without changing functionality)	x
🚦 Test update (change that only adds or modifies tests)
📦 Dependency update (change that updates a dependency)
📖 Documentation update (change that updates documentation)
🔧 Internal (change that only affects developers or continuous integration)

Checklist

(Complete each of the following items for your pull request. Indicate that you have completed an item by changing the [ ] into a [x] in the raw text, or by clicking on the checkbox in the rendered description on GitHub.)

Before opening your pull request:

• I have performed a self-review of my changes.
  • Check that all changed files included in this pull request are intentional changes.
  • Check that all changes are relevant to the purpose of this pull request, as described above.
• I have added tests for my changes, if applicable.
  • This is required for all bug fixes and new features.
• I have updated the project documentation, if applicable.
  • This is required for new features.
• If this is my first contribution, I have added myself to the list of contributors.

After opening your pull request:

• I have updated the project Changelog (this is required for all changes).
• I have verified that the pre-commit.ci checks have passed.
• I have verified that the CI tests have passed.
• I have reviewed the test coverage changes reported by Coveralls.
• I have requested a review from a project maintainer.

Questions and Comments

(Include any questions or comments you have regarding your changes.)

[coveralls]

Coverage Report for CI Build 31046530609

Coverage remained the same at 90.589%

Details

• Coverage remained the same as the base build.
• Patch coverage: 1 uncovered change across 1 file (1 of 2 lines covered, 50.0%).
• No coverage regressions found.

Uncovered Changes

File	Changed	Covered	%
app/controllers/exam_templates_controller.rb	1	0	0.0%
Total (2 files)	2	1	50.0%

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	51604
Covered Lines:	47765
Line Coverage:	92.56%
Relevant Branches:	2491
Covered Branches:	1239
Branch Coverage:	49.74%
Branches in Coverage %:	Yes
Coverage Strength:	129.55 hits per line

---

💛 - Coveralls