diff --git a/deploy/nginx.template b/deploy/nginx.template
index 2e6c81081..a1e717729 100644
--- a/deploy/nginx.template
+++ b/deploy/nginx.template
@@ -94,7 +94,7 @@ server {
         add_header Cache-Control "public, must-revalidate, proxy-revalidate";
     }
     location = /front/embed.html {
-        add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; object-src 'none'; media-src 'self' data:; worker-src 'self'";
+        add_header Content-Security-Policy "connect-src https: http: 'self'; default-src 'self'; script-src 'self' unpkg.com 'unsafe-inline' 'unsafe-eval'; style-src https: http: 'self' 'unsafe-inline'; img-src https: http: 'self' data:; font-src https: http: 'self' data:; object-src 'none'; media-src https: http: 'self' data:";
         add_header Referrer-Policy "strict-origin-when-cross-origin";
 
         add_header X-Frame-Options "" always;