diff --git a/src/snek/system/middleware.py b/src/snek/system/middleware.py
index d2e4edd..cb2f6bd 100644
--- a/src/snek/system/middleware.py
+++ b/src/snek/system/middleware.py
@@ -7,21 +7,20 @@ from aiohttp import web
 
 @web.middleware
 async def csp_middleware(request, handler):
-    nonce = str(secrets.token_hex(16))
-    print("Nonce:", nonce)
+    nonce = secrets.token_hex(16)
     csp_policy = (
         "default-src 'self'; "
         f"script-src 'self' https://umami.molodetz.nl 'nonce-{nonce}'; "
         "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
-        "img-src 'self' data: https://umodetz.nl; "
-        "connect-src 'self' https://umodetz.nl; "
-        "font-src 'self' data:; "
+        "img-src *; "
+        "connect-src 'self' https://umami.molodetz.nl; "
+        "font-src *; "
         "object-src 'none'; "
         "base-uri 'self'; "
         "form-action 'self'; "
         "frame-src 'self'; "
-        "worker-src 'self'; "
-        "media-src 'self'; "
+        "worker-src *; "
+        "media-src *; "
         "manifest-src 'self';"
     )
     request['csp_nonce'] = nonce