diff --git a/static/partials/youtubevideo_sandbox.html b/static/partials/youtubevideo_sandbox.html
index b178d01d..a50ea83e 100644
--- a/static/partials/youtubevideo_sandbox.html
+++ b/static/partials/youtubevideo_sandbox.html
@@ -2,6 +2,7 @@
 <html>
 	<head>
 		<title>YouTube Player Sandbox</title>
+		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src __PARENT_ORIGIN__ https://www.youtube.com https://s.ytimg.com 'unsafe-eval'; frame-src https://www.youtube.com; style-src 'unsafe-inline'">
 		<style type="text/css">
 		html, body {
 			height:100%;
