diff --git a/server/src/app.ts b/server/src/app.ts
index f195d8140..12e552406 100644
--- a/server/src/app.ts
+++ b/server/src/app.ts
@@ -76,6 +76,7 @@ export const createApp = ({
 				directives: {
 					upgradeInsecureRequests: null,
 					"script-src": ["'self'", "'unsafe-inline'", "'unsafe-eval'"],
+					"img-src": ["'self'", "data:", "https://img.shields.io"],
 					"object-src": ["'none'"],
 					"base-uri": ["'self'"],
 				},