diff --git a/server.conf.in b/server.conf.in
index a66af10f..b57031a7 100644
--- a/server.conf.in
+++ b/server.conf.in
@@ -118,6 +118,7 @@ serverRealm = local
 ;   img-src 'self' data: blob:;
 ;   connect-src 'self' wss://server:port/ws blob:;
 ;   font-src 'self' data: blob:;
+;   media-src 'self' blob:;
 ;contentSecurityPolicy =
 ; Content-Security-Policy-Report-Only HTTP response header value. Use this
 ; to test your CSP before putting it into production.