diff --git a/chrome/content/zotero/xpcom/report.js b/chrome/content/zotero/xpcom/report.js
index e5ee06157a..5c6cce562f 100644
--- a/chrome/content/zotero/xpcom/report.js
+++ b/chrome/content/zotero/xpcom/report.js
@@ -35,6 +35,7 @@ Zotero.Report.HTML = new function () {
 			+ '<html>\n'
 			+ '	<head>\n'
 			+ '		<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />\n'
+			+ '		<meta http-equiv="Content-Security-Policy" content="script-src \'none\'; media-src \'none\'" />\n'
 			+ '		<title>' + Zotero.getString('report.title.default') + '</title>\n'
 			+ '		<link rel="stylesheet" type="text/css" href="' + _getCSSDataURI('detail') + '"/>\n'
 			+ '		<link rel="stylesheet" type="text/css" media="screen,projection" href="' + _getCSSDataURI('detail_screen') + '"/>\n'
