diff --git a/conf/nginx.conf b/conf/nginx.conf
index 748f7f1..bf700f0 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -35,3 +35,7 @@ location / {
   # Include SSOWAT user panel.
   include conf.d/yunohost_panel.conf.inc;
 }
+
+location ~ ^/media {
+    add_header Content-Security-Policy "script-src 'none';";
+}