diff --git a/next.config.js b/next.config.js
index a1e30c36..eaaf8fe7 100644
--- a/next.config.js
+++ b/next.config.js
@@ -9,6 +9,7 @@ const contentSecurityPolicy = [
   `script-src 'self' 'unsafe-eval' 'unsafe-inline'`,
   `style-src 'self' 'unsafe-inline'`,
   `connect-src 'self' api.umami.is`,
+  `frame-src *`,
 ];
 
 const cspHeader = (values = []) => ({