diff --git a/docker/dinum-frontend/nginx/default.conf b/docker/dinum-frontend/nginx/default.conf
index 6daead5c..76619fb9 100644
--- a/docker/dinum-frontend/nginx/default.conf
+++ b/docker/dinum-frontend/nginx/default.conf
@@ -48,7 +48,7 @@ server {
 
       set $nonce $request_id;
 
-      set $csp "upgrade-insecure-requests; ";
+      set $csp "default-src 'self'; upgrade-insecure-requests; ";
       set $csp "${csp}frame-ancestors ${ms_domains}; ";
       set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; ";
       set $csp "${csp}connect-src 'self' ${ms_domains}; ";
diff --git a/src/helm/extra/templates/frontend_nginx_cm.yaml b/src/helm/extra/templates/frontend_nginx_cm.yaml
index 3ca49de1..ede7cd6e 100644
--- a/src/helm/extra/templates/frontend_nginx_cm.yaml
+++ b/src/helm/extra/templates/frontend_nginx_cm.yaml
@@ -56,7 +56,7 @@ data:
 
             set $nonce $request_id;
 
-            set $csp "upgrade-insecure-requests; ";
+            set $csp "default-src 'self'; upgrade-insecure-requests; ";
             set $csp "${csp}frame-ancestors ${ms_domains}; ";
             set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; ";
             set $csp "${csp}connect-src 'self' ${ms_domains}; ";