diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts
index 61064e46f2..f776c19ed4 100644
--- a/packages/backend/src/server/web/index.ts
+++ b/packages/backend/src/server/web/index.ts
@@ -546,7 +546,7 @@ router.get("/notes/:note", async (ctx, next) => {
ctx.set("Cache-Control", "public, max-age=15");
ctx.set(
"Content-Security-Policy",
- "default-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; font-src 'self' data:; img-src *; media-src *; worker-src 'self'; frame-ancestors *",
+ "default-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; font-src 'self' data:; img-src * data:; media-src *; worker-src 'self'; frame-ancestors *",
);
return;
diff --git a/packages/client/src/components/MkQrCode.vue b/packages/client/src/components/MkQrCode.vue
index 948de74c13..339ca82dd9 100644
--- a/packages/client/src/components/MkQrCode.vue
+++ b/packages/client/src/components/MkQrCode.vue
@@ -6,9 +6,14 @@
:value="qrCode"
/>
-