diff --git a/SciPost_v1/settings/base.py b/SciPost_v1/settings/base.py
index 9726f61ecdb5f583d8cfe15916245b5b4364962f..8db19ddab357d677fb1d41b599e18c73d306efc3 100644
--- a/SciPost_v1/settings/base.py
+++ b/SciPost_v1/settings/base.py
@@ -198,7 +198,8 @@ X_FRAME_OPTIONS = 'DENY'
 REFERRER_POLICY = 'same-origin'
 CSP_FONT_SRC = ("'self'", 'fonts.gstatic.com', 'cdnjs.cloudflare.com', 'www.google.com')
 CSP_FRAME_SRC = ('www.google.com', 'player.vimeo.com')
-CSP_IMG_SRC = ("'self'", 'assets.crossref.org', 'licensebuttons.net', 'crossmark-cdn.crossref.org')
+CSP_IMG_SRC = ("'self'", 'ajax.googleapis.com', 'assets.crossref.org',
+               'licensebuttons.net', 'crossmark-cdn.crossref.org')
 CSP_SCRIPT_SRC = ("'self'", "'unsafe-inline'", 'ajax.googleapis.com', 'cdnjs.cloudflare.com',
                   'crossmark-cdn.crossref.org', 'www.recaptcha.net', 'www.gstatic.com')
 CSP_STYLE_SRC = ("'self'", "'unsafe-inline'", 'ajax.googleapis.com',