diff --git a/server/apps/server-app/src/main/resources/config/application.yml b/server/apps/server-app/src/main/resources/config/application.yml
index 5fc5e1fb0e5..8b87339b5ac 100644
--- a/server/apps/server-app/src/main/resources/config/application.yml
+++ b/server/apps/server-app/src/main/resources/config/application.yml
@@ -228,7 +228,7 @@ bytechef:
   resources:
     web: file:///opt/bytechef/client/
   security:
-    content-security-policy: "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.commandbar.com https://cdn.jsdelivr.net https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data:; font-src 'self' data:; script-src: https://*.command.ai; frame-src: https://*.command.ai; img-src: https://*.command.ai; media-src: https://*.command.ai; connect-src: https://*.command.ai https://eu.i.posthog.com; style-src: https://*.command.ai;"
+    content-security-policy: "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.commandbar.com https://cdn.jsdelivr.net https://storage.googleapis.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data:; font-src 'self' data:; script-src https://*.command.ai; frame-src https://*.command.ai; img-src https://*.command.ai; media-src https://*.command.ai; connect-src https://*.command.ai https://eu.i.posthog.com; style-src https://*.command.ai;"
   sign-up:
     temp-domain-list-url: #https://gist.githubusercontent.com/SimonHoiberg/f5a23b1fa3762330c8af1e9090918b63/raw/53963d0dbdd93c594fbc067cee95966156ee066b/temp-email-list.txt
   # Tenant support mode (single | multi - ee only) default: single