diff --git a/app/Controllers/Episode.php b/app/Controllers/Episode.php
index 477a5cad..a4a8ce21 100644
--- a/app/Controllers/Episode.php
+++ b/app/Controllers/Episode.php
@@ -88,6 +88,8 @@ class Episode extends BaseController
 
     public function embeddablePlayer($theme = 'light-transparent')
     {
+        header('Content-Security-Policy: frame-ancestors https://* http://*');
+
         self::triggerWebpageHit($this->episode->podcast_id);
 
         $session = \Config\Services::session();