diff --git a/script-api.py b/script-api.py
index c8ab333..854db9f 100755
--- a/script-api.py
+++ b/script-api.py
@@ -270,8 +270,8 @@ class ApiHandler(
         )
 
         self.send_header(
-            "X-Frame-Options",
-            "DENY"
+            "Content-Security-Policy",
+            "frame-ancestors 'self' http://192.168.178.60:8080"
         )
 
         self.send_header(