diff --git a/nginx/snippets/private-image-locations.conf.template b/nginx/snippets/private-image-locations.conf.template
index c8611ec..8abbb6b 100644
--- a/nginx/snippets/private-image-locations.conf.template
+++ b/nginx/snippets/private-image-locations.conf.template
@@ -1,4 +1,5 @@
 location ^~ /i/ {
+    add_header Content-Security-Policy "sandbox" always;
     add_header X-Content-Type-Options "nosniff" always;
     add_header Cross-Origin-Resource-Policy "cross-origin" always;
     add_header Cache-Control "private, no-store" always;