Index: openacs-4/packages/acs-tcl/tcl/security-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/security-procs.tcl,v
diff -u -r1.78.2.26 -r1.78.2.27
--- openacs-4/packages/acs-tcl/tcl/security-procs.tcl	6 Sep 2016 17:33:55 -0000	1.78.2.26
+++ openacs-4/packages/acs-tcl/tcl/security-procs.tcl	9 Sep 2016 08:27:11 -0000	1.78.2.27
@@ -2037,6 +2037,7 @@
         security::csp::require default-src 'self'
         security::csp::require script-src 'self'
         security::csp::require style-src 'self'
+        security::csp::require img-src 'self'
 
         #
         # Always add the nonce-token to script-src