diff --git a/backend/src/router.rs b/backend/src/router.rs
index 1793941..f8190cf 100644
--- a/backend/src/router.rs
+++ b/backend/src/router.rs
@@ -132,7 +132,7 @@ pub fn build_router(state: AppState, config: &AppConfig) -> Router {
         .layer(SetResponseHeaderLayer::overriding(
             HeaderName::from_static("content-security-policy"),
             HeaderValue::from_static(
-                "default-src 'self'; script-src 'self' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; frame-src https://challenges.cloudflare.com; img-src 'self' data:; font-src 'self' data:; connect-src 'self'",
+                "default-src 'self'; script-src 'self' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; frame-src https://challenges.cloudflare.com; img-src 'self' data:; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com",
             ),
         ));