diff --git a/src/js/traffic.js b/src/js/traffic.js
index c587930..d2ec4f3 100644
--- a/src/js/traffic.js
+++ b/src/js/traffic.js
@@ -787,7 +787,7 @@ var onSubDocHeadersReceived = function(details) {
 
     details.responseHeaders.push({
         'name': 'Content-Security-Policy',
-        'value': 'sandbox allow-forms allow-same-origin allow-popups'
+        'value': 'sandbox allow-forms allow-same-origin allow-popups allow-top-navigation'
     });
 
     return { responseHeaders: details.responseHeaders };