diff --git a/lib/defaults.js b/lib/defaults.js
index 95221f6bf..dab40e3f7 100644
--- a/lib/defaults.js
+++ b/lib/defaults.js
@@ -48,7 +48,7 @@ Default.padContentSecurity = function (Env) {
 };
 
 Default.drawioContentSecurity = function (Env) {
-    return (Default.commonCSP(Env).join('; ') + "script-src 'self' 'unsafe-inline' resource: " + Env.httpUnsafeOrigin).replace(/\s+/g, ' ');
+    return (Default.commonCSP(Env).join('; ') + "script-src 'self' 'sha256-+hYPMSCUTTRq44AeLdIxRO6I7f2KjNhFS1RlQG3XZgA=' 'sha256-6g514VrT/cZFZltSaKxIVNFF46+MFaTSDTPB8WfYK+c=' resource: " + Env.httpUnsafeOrigin).replace(/\s+/g, ' ');
 };
 
 Default.httpHeaders = function (Env) {