diff --git a/backend/src/middleware/security.js b/backend/src/middleware/security.js
index 2badf8f..6baffcc 100644
--- a/backend/src/middleware/security.js
+++ b/backend/src/middleware/security.js
@@ -18,6 +18,7 @@ export const setupSecurity = (app) => {
       },
     },
     crossOriginEmbedderPolicy: false,
+    crossOriginResourcePolicy: { policy: 'cross-origin' },
   }));
 
   // CORS