diff --git a/lib/dotcom_web/plugs/secure_headers.ex b/lib/dotcom_web/plugs/secure_headers.ex
index 268718f0f4..4574059111 100644
--- a/lib/dotcom_web/plugs/secure_headers.ex
+++ b/lib/dotcom_web/plugs/secure_headers.ex
@@ -34,6 +34,7 @@ defmodule DotcomWeb.Plugs.SecureHeaders do
       www.googletagmanager.com
       www.instagram.com
       *.soundcloud.com
+      *.vimeo.com
     ],
     img: ~w[
       img-src