diff --git a/src/main/csp.ts b/src/main/csp.ts
index 2faee606..08a200d6 100644
--- a/src/main/csp.ts
+++ b/src/main/csp.ts
@@ -12,7 +12,7 @@ export const ConnectSrc = ["connect-src"];
 export const MediaSrc = [...ConnectSrc, "img-src", "media-src"];
 export const CssSrc = ["style-src", "font-src"];
 export const MediaAndCssSrc = [...MediaSrc, ...CssSrc];
-export const MediaScriptsAndCssSrc = [...MediaAndCssSrc, "script-src", "worker-src"];
+export const MediaScriptsAndCssSrc = [...MediaAndCssSrc, "script-src", "worker-src", "frame-src"];
 
 // Plugins can whitelist their own domains by importing this object in their native.ts
 // script and just adding to it. But generally, you should just edit this file instead