diff --git a/middleware.js b/middleware.js
index afd4fc0b..d8a952ed 100644
--- a/middleware.js
+++ b/middleware.js
@@ -14,6 +14,7 @@ export function middleware(request) {
     font-src 'self'  https://pro.fontawesome.com/ https://fonts.gstatic.com/ ;
     object-src 'none';
     base-uri 'self';
+    frame-src https://datamap.gov.wales/;
     form-action 'self' ` +
         process.env.NEXTAUTH_URL +
         `;