use heic-to/csp for CSP fixes

Author: kacper-mikolajczak

src/libs/fileDownload/heicConverter/index.ts

@@ -1,5 +1,16 @@
 import type {HeicConverterFunction} from './types';
 
+type HeicConverter = {
+    heicTo: (options: {blob: Blob; type: string}) => Promise<Blob>;
+    isHeic: (file: File) => Promise<boolean>;
+};
+
+const getHeicConverter = () => {
+    // Use the CSP variant to ensure the library is loaded in a secure context. See https://github.com/hoppergee/heic-to?tab=readme-ov-file#cotent-security-policy
+    // @ts-expect-error - heic-to/csp is not correctly typed but exists
+    return import(/* webpackMode: "eager" */ 'heic-to/csp').then(({heicTo, isHeic}: HeicConverter) => ({heicTo, isHeic}));
+};
+
 /**
  * Web implementation for converting HEIC/HEIF images to JPEG
  * @param file - The file to check and potentially convert
@@ -23,7 +34,7 @@ const convertHeicImage: HeicConverterFunction = (file, {onSuccess = () => {}, on
     }
 
     // Start loading the conversion library in parallel with fetching the file
-    const libraryPromise = import(/* webpackMode: "eager" */ 'heic-to').catch((importError) => {
+    const libraryPromise = getHeicConverter().catch((importError) => {
         console.error('Error loading heic-to library:', importError);
         // Re-throw a normalized error so the outer catch can handle it uniformly
         throw new Error('HEIC conversion library unavailable');