diff --git a/bskyweb/cmd/bskyweb/server.go b/bskyweb/cmd/bskyweb/server.go
index 35481e245f..a9b7deadae 100644
--- a/bskyweb/cmd/bskyweb/server.go
+++ b/bskyweb/cmd/bskyweb/server.go
@@ -111,7 +111,7 @@ func serve(cctx *cli.Context) error {
 	e.Use(middleware.SecureWithConfig(middleware.SecureConfig{
 		ContentTypeNosniff:    "nosniff",
 		XFrameOptions:         "SAMEORIGIN",
-		ContentSecurityPolicy: "frame-ancestors 'self' http://localhost:19006 https://*.bsky.dev",
+		ContentSecurityPolicy: "frame-ancestors 'self' http://localhost:19006",
 		HSTSMaxAge:            31536000, // 365 days
 		// TODO:
 		// XSSProtection