diff --git a/src/api.server.ts b/src/api.server.ts
index 2d7fc4f..eed8f60 100644
--- a/src/api.server.ts
+++ b/src/api.server.ts
@@ -37,7 +37,7 @@ export class ApiServer {
     this.server.register(require('@fastify/formbody'))
     this.server.register(require('fastify-xml-body-parser'))
     this.server.register(zReqParserPlugin)
-    this.server.register(helmet, { hidePoweredBy: false })
+    this.server.register(helmet, { hidePoweredBy: false, contentSecurityPolicy: false })
     this.server.register(zTokenParserPlugin)
 
     this.server.register(apiAuthPlugin, {