diff --git a/src/cheogram/java/com/cheogram/android/WebxdcPage.java b/src/cheogram/java/com/cheogram/android/WebxdcPage.java
index 8808d97ecc49b062d0bd546723b434741c898406..d6b80f27892c387a47648731f576c19f0d50b59b 100644
--- a/src/cheogram/java/com/cheogram/android/WebxdcPage.java
+++ b/src/cheogram/java/com/cheogram/android/WebxdcPage.java
@@ -202,6 +202,7 @@ public class WebxdcPage implements ConversationPage {
 				+ "script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ; "
 				+ "connect-src 'self' data: blob: ; "
 				+ "img-src 'self' data: blob: ; "
+				+ "media-src 'self' data: blob: ; "
 				+ "webrtc 'block' ; "
 			);
 			headers.put("X-DNS-Prefetch-Control", "off");