--- a/cms/app-client/config/environment.js	Wed Jan 20 13:04:27 2016 +0100
+++ b/cms/app-client/config/environment.js	Wed Jan 20 15:53:27 2016 +0100
@@ -25,6 +25,15 @@
     // ENV.APP.LOG_TRANSITIONS = true;
     // ENV.APP.LOG_TRANSITIONS_INTERNAL = true;
     // ENV.APP.LOG_VIEW_LOOKUPS = true;
+    ENV.contentSecurityPolicy = {
+      'default-src': "'none'",
+      'script-src': "'self' *",
+      'font-src': "'self'",
+      'connect-src': "'self' *",
+      'img-src': "'self'",
+      'style-src': "'self' *",
+      'media-src': "'self'"
+    };
   }
 
   if (environment === 'test') {