diff --git a/server/index.js b/server/index.js
index 89f5930b3..eea5b015a 100755
--- a/server/index.js
+++ b/server/index.js
@@ -324,6 +324,12 @@ const startApp = async () => {
 	app.use(
 		helmet({
 			hsts: false,
+			contentSecurityPolicy: {
+				useDefaults: true,
+				directives: {
+					upgradeInsecureRequests: null,
+				},
+			},
 		})
 	);
 	app.use(