diff --git a/src/api/http-common.c b/src/api/http-common.c
index d0d5aeff..3060897d 100644
--- a/src/api/http-common.c
+++ b/src/api/http-common.c
@@ -312,6 +312,7 @@ void http_init(void)
 		"decode_url", "no",
 		"num_threads", "4",
 		"access_control_list", httpsettings.acl,
+		"additional_header", "Content-Security-Policy: default-src 'self' 'unsafe-inline';",
 		NULL
 	};
 
@@ -400,4 +401,4 @@ int http_method(struct mg_connection *conn)
 	{
 		return HTTP_UNKNOWN;
 	}
-}
\ No newline at end of file
+}