diff --git a/server/helmet.json b/server/helmet.json
index 1cd301d813..29b74d2244 100644
--- a/server/helmet.json
+++ b/server/helmet.json
@@ -5,6 +5,7 @@
       "script-src": ["'self'", "'wasm-unsafe-eval'", "'unsafe-inline'", "https://www.gstatic.com"],
       "style-src": ["'self'", "'unsafe-inline'"],
       "img-src": ["'self'", "data:", "blob:"],
+      "media-src": ["'self'", "data:", "blob:"],
       "connect-src": [
         "'self'",
         "blob:",