diff --git a/src/js/index.js b/src/js/index.js
index 96f0e8abc..38aa005f4 100644
--- a/src/js/index.js
+++ b/src/js/index.js
@@ -89,6 +89,16 @@ app.config(['NotificationProvider', function (NotificationProvider) {
     });
 }]);
 
+// configure resourceUrlWhitelist https://code.angularjs.org/1.5.8/docs/api/ng/provider/$sceDelegateProvider#resourceUrlWhitelist
+app.config(function ($sceDelegateProvider) {
+    $sceDelegateProvider.resourceUrlWhitelist([
+        // Allow same origin resource loads.
+        'self',
+        // Allow loading from our assets domain.  Notice the difference between * and **.
+        'https://*cloudron.io/**'
+    ]);
+});
+
 // setup all major application routes
 app.config(['$routeProvider', function ($routeProvider) {
     $routeProvider.when('/', {