diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index 5423271..7040a8d 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -14,7 +14,8 @@ Rails.application.config.content_security_policy do |policy|
   policy.script_src  :self
   policy.font_src    :self
   # TODO: Permitimos cargar imágenes remotas?
-  policy.img_src     :self
+  # XXX: Los íconos de Trix se cargan vía data:
+  policy.img_src     :self, :data
   # Ya no usamos applets!
   policy.object_src  :none
   if Rails.env.development?