Kibana version: 6.7

**Elasticsearch version: 6.7 **

Server OS version: cloud

Browser version: Chrome

Browser OS version: Windows

Original install method (e.g. download page, yum, from source, etc.):
Cloud instance from 6.7 BC

Steps to reproduce:

1. Add image to the workpad
2. Set it to pull from a URL
3. Change it to use a specific asset
4. Click on the link tab again and try to edit the URL
   -> browser hangs

Screenshots (if relevant):

Errors in browser console (if relevant):
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-SHHSeLc0bp6xt4BoVVyUy+3IbVqp3ujLaR+s+kSP5UI='), or a nonce ('nonce-...') is required to enable inline execution.

:9243/s/rayas-playground/bundles/app/canvas/bootstrap.js:10 ^ A single error about an inline script not firing due to content security policy is expected!
(unknown) WebExtension::executeScript: content script injected