diff --git a/package-lock.json b/package-lock.json
index 72c66b5a..f766ee3c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "marked": "^15.0.12",
         "mathjax": "^3.2.2",
         "mathjs": "^11.8.2",
-        "mathlive": "github:mgreminger/mathlive#c37dc0627abd4daebd0774438973e0dd5215d2b6",
+        "mathlive": "github:mgreminger/mathlive#487912900e383bfa85a413c77e8b91c10c4e08f2",
         "plotly.js-basic-dist": "github:mgreminger/plotly.js#dist-basic-for-ep",
         "quick-lru": "^6.1.1",
         "quill": "^2.0.3",
@@ -6251,8 +6251,8 @@
     },
     "node_modules/mathlive": {
       "version": "0.98.6",
-      "resolved": "git+ssh://git@github.com/mgreminger/mathlive.git#c37dc0627abd4daebd0774438973e0dd5215d2b6",
-      "integrity": "sha512-a4C2KS0tDxDLrO421lYavFDJWYKeXqXGH5PwQsxBJ/ira5k+587fez24l8DXVeTzhR5QqSR2kpweoYReVphjjA==",
+      "resolved": "git+ssh://git@github.com/mgreminger/mathlive.git#487912900e383bfa85a413c77e8b91c10c4e08f2",
+      "integrity": "sha512-LDhssAbNPK4ub9KoBr7pLPaKzKN456qpXPao+lFtrttIQ3LLUvtQuCLpxowhBgaJGyM0CVZqvF8NglwfoiMipg==",
       "license": "MIT",
       "dependencies": {
         "@cortex-js/compute-engine": "0.23.1"
@@ -12992,9 +12992,9 @@
       }
     },
     "mathlive": {
-      "version": "git+ssh://git@github.com/mgreminger/mathlive.git#c37dc0627abd4daebd0774438973e0dd5215d2b6",
-      "integrity": "sha512-a4C2KS0tDxDLrO421lYavFDJWYKeXqXGH5PwQsxBJ/ira5k+587fez24l8DXVeTzhR5QqSR2kpweoYReVphjjA==",
-      "from": "mathlive@github:mgreminger/mathlive#c37dc0627abd4daebd0774438973e0dd5215d2b6",
+      "version": "git+ssh://git@github.com/mgreminger/mathlive.git#487912900e383bfa85a413c77e8b91c10c4e08f2",
+      "integrity": "sha512-LDhssAbNPK4ub9KoBr7pLPaKzKN456qpXPao+lFtrttIQ3LLUvtQuCLpxowhBgaJGyM0CVZqvF8NglwfoiMipg==",
+      "from": "mathlive@github:mgreminger/mathlive#487912900e383bfa85a413c77e8b91c10c4e08f2",
       "requires": {
         "@cortex-js/compute-engine": "0.23.1"
       }
diff --git a/package.json b/package.json
index 1a00fb36..a25d145d 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "marked": "^15.0.12",
     "mathjax": "^3.2.2",
     "mathjs": "^11.8.2",
-    "mathlive": "github:mgreminger/mathlive#c37dc0627abd4daebd0774438973e0dd5215d2b6",
+    "mathlive": "github:mgreminger/mathlive#487912900e383bfa85a413c77e8b91c10c4e08f2",
     "plotly.js-basic-dist": "github:mgreminger/plotly.js#dist-basic-for-ep",
     "quick-lru": "^6.1.1",
     "quill": "^2.0.3",
diff --git a/src/database/_worker.ts b/src/database/_worker.ts
index 333b777a..d7efd01f 100644
--- a/src/database/_worker.ts
+++ b/src/database/_worker.ts
@@ -6,7 +6,7 @@ const checkpointPathRegEx = /^\/temp-checkpoint-[a-f0-9-]{36}$/;
 
 const maxSize = 2000000; // max length of byte string that represents sheet
 
-const cspHeaderValue = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src * data: blob:;";
+const cspHeaderValue = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src * data: blob:; media-src 'self' data:;";
 // local dev mode requires some extra exceptions for live reload
 const devCspHeaderValue = cspHeaderValue + " script-src 'self' 'unsafe-inline'; connect-src 'self' ws://localhost:5173 wss://localhost:5173;";