diff --git a/internal/api/assets/asset.go b/internal/api/assets/asset.go
index 9830baeb9..9b73a93e7 100644
--- a/internal/api/assets/asset.go
+++ b/internal/api/assets/asset.go
@@ -92,6 +92,8 @@ func NewHandler(commands *command.Commands, verifier *authz.TokenVerifier, authC
 
 	verifier.RegisterServer("Assets-API", "assets", AssetsService_AuthMethods)
 	router := mux.NewRouter()
+	csp := http_mw.SecurityHeaders(&http_mw.DefaultSCP, nil)
+	router.Use(callDurationInterceptor, instanceInterceptor, assetCacheInterceptor, accessInterceptor, csp)
 	router.Use(callDurationInterceptor, instanceInterceptor, assetCacheInterceptor, accessInterceptor)
 	RegisterRoutes(router, h)
 	router.PathPrefix("/{owner}").Methods("GET").HandlerFunc(DownloadHandleFunc(h, h.GetFile()))