diff --git a/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf b/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf
index cb7969e2a7..2494206e0c 100644
--- a/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf
+++ b/roles/download/files/httpd/dl.fedoraproject.org/securityheaders.conf
@@ -2,5 +2,5 @@ Header always set X-Frame-Options "DENY"
 Header always set X-Xss-Protection "1; mode=block"
 Header always set X-Content-Type-Options "nosniff"
 Header always set Referrer-Policy "same-origin"
-Header always set Content-Security-Policy "default-src 'none'"
+Header always set Content-Security-Policy "default-src 'none'; img-src 'self'"
 Header always add Strict-Transport-Security "max-age=31536000; preload"