diff --git a/lib/index.js b/lib/index.js
index <HASH>..<HASH> 100644
--- a/lib/index.js
+++ b/lib/index.js
@@ -61,7 +61,7 @@ module.exports.SRC_USAFE_INLINE = "'unsafe-inline'";
 /** Allows unsafe dynamic code evaluation such as JavaScript eval() */
 module.exports.SRC_UNSAFE_EVAL = "'unsafe-eval'";
 /** Allows loading resources via the data scheme (e.g. Base64 encoded images). */
-module.exports.SRC_DATA = "data";
+module.exports.SRC_DATA = "data:";
 /** Wildcard, allows anything. */
 module.exports.SRC_ANY = "*";
 /** Allows loading resources only over HTTPS on any domain. */
fixed data uri constant

A ':' was missing