diff --git a/backend/src/middleware/security.js b/backend/src/middleware/security.js
index 2a5b17d..8aaf010 100644
--- a/backend/src/middleware/security.js
+++ b/backend/src/middleware/security.js
@@ -10,6 +10,7 @@ export const setupSecurity = (app) => {
         defaultSrc: ["'self'"],
         styleSrc: ["'self'", "'unsafe-inline'"],
         scriptSrc: ["'self'", "https://static.cloudflareinsights.com", "'unsafe-inline'"],
+        connectSrc: ["'self'", "ws:", "wss:", "http:", "https:"],
         imgSrc: ["'self'", 'data:', 'https:'],
       },
     },