blob: URLs should match if the blob: scheme is explicitly specified in the frame-src directive.