diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts
index 90126440c..f3c1ea788 100644
--- a/packages/backend/src/server/web/index.ts
+++ b/packages/backend/src/server/web/index.ts
@@ -469,7 +469,7 @@ router.get("/notes/:note", async (ctx, next) => {
 			ctx.set("Cache-Control", "public, max-age=15");
 			ctx.set(
 				"Content-Security-Policy",
-				"default-src 'self' 'unsafe-inline'; img-src *; frame-ancestors *",
+				"default-src 'self' 'unsafe-inline'; img-src *; media-src *; frame-ancestors *",
 			);
 
 			return;