diff --git a/install/data/defaults.json b/install/data/defaults.json
index 56987f0b58..11c24c2706 100644
--- a/install/data/defaults.json
+++ b/install/data/defaults.json
@@ -147,7 +147,7 @@
     "digestHour": 17,
     "passwordExpiryDays": 0,
     "cross-origin-embedder-policy": 0,
-    "cross-origin-resource-policy": "cross-origin",
+    "cross-origin-resource-policy": "same-origin",
     "hsts-maxage": 31536000,
     "hsts-subdomains": 0,
     "hsts-preload": 0,