diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index a82c1dd1..0ea61b0a 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -231,6 +231,7 @@ http {
 
         location ~ "\.(ico|webmanifest)$" {
             include snippets/security-headers.conf;
+            add_header Cross-Origin-Resource-Policy "same-origin";
             add_header Cache-Control "public, max-age=604800";
         }