diff --git a/dl.yml b/dl.yml
index 8a83f44..6fbadb4 100644
--- a/dl.yml
+++ b/dl.yml
@@ -90,7 +90,7 @@
 
               root /var/www/dl.afpy.org/;
 
-              add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'self'";
+              add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'self'; media-src 'self'";
               add_header X-Content-Type-Options "nosniff";
 
               location /