Does not work with CSP img-src where data: sources are blocked

[codemasterover9000]

The problem occurs when selecting images with non default orientation (from camera for example). Cropper tries to rotate the image for viewing. Rendering the image to a rotated canvas and making an image from the canvas using a data: url.

To reproduce
To reproduce open the following image https://github.com/recurser/exif-orientation-examples/blob/master/Portrait_7.jpg in one of the demos with CSP header as img-src 'self' blob:;

You can use this plugin for quick testing from the browser: https://chrome.google.com/webstore/detail/csp-tester/ehmipebdmhlmikaopdfoinmcjhhfadlf

Possible solutions
Instead of producing an intermediate image, rendering the source (blob:) image directly rotated onto the target canvas would probably fix the problem.

Or

Add an option to disable auto orientation correction and add rotation controls to the component.