diff --git a/conf/application.conf b/conf/application.conf
index bb6cbaa..9205aba 100644
--- a/conf/application.conf
+++ b/conf/application.conf
@@ -1,4 +1,4 @@
 # application.conf
 
 play.filters.headers.frameOptions=SAMEORIGIN
-play.filters.headers.contentSecurityPolicy="default-src: 'self'; script-src: 'unsafe-inline'"
+play.filters.headers.contentSecurityPolicy="default-src 'self'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'"