diff --git a/app/controllers/Tv.scala b/app/controllers/Tv.scala
index e9f1f5c9bd..edf903b9cf 100644
--- a/app/controllers/Tv.scala
+++ b/app/controllers/Tv.scala
@@ -1,6 +1,6 @@
 package controllers
 
-import play.api.mvc._
+import play.api.mvc._, Results._
 import play.twirl.api.Html
 
 import lila.api.Context
@@ -67,8 +67,12 @@ object Tv extends LilaController {
       Env.tv.streamsOnAir.all flatMap { streams =>
         val others = streams.filter(_.id != id)
         streams find (_.id == id) match {
-          case None    => fuccess(Ok(html.tv.notStreaming(streamer, others)))
-          case Some(s) => fuccess(Ok(html.tv.stream(s, others)))
+          case None => fuccess(Ok(html.tv.notStreaming(streamer, others)))
+          case Some(s) => fuccess {
+            Ok(html.tv.stream(s, others)) withHeaders (
+              "Content-Security-Policy" -> """connect-src http://*.lichess.org ws://*.lichess.org:* http://lichess1.org http://www.twitch.tv http://www-cdn.jtvnw.net http://*.googleapis.com"""
+            )
+          }
         }
       }
     }