diff --git a/invenio/invenio.cfg b/invenio/invenio.cfg
index cb55e28..b95c181 100644
--- a/invenio/invenio.cfg
+++ b/invenio/invenio.cfg
@@ -119,6 +119,9 @@ APP_DEFAULT_SECURE_HEADERS = {
         "img-src": [
             "*",
         ],
+        "script-src": [
+             "'self'", "blob:", "'wasm-unsafe-eval'"
+        ],
     },
     "force_https": True,
     "force_https_permanent": False,
@@ -216,6 +219,9 @@ APP_RDM_DEPOSIT_FORM_QUOTA = {
     "maxFiles": 500,
     "maxStorage": 10 * 1024**4,  # 10 TB
 }
+
+APP_RDM_DEPOSIT_NG_FILES_UI_ENABLED = True
+
 # Invenio-S3
 # ==========
 S3_ACCESS_KEY_ID = "CHANGE_ME"