diff --git a/backend/src/index.js b/backend/src/index.js
index 463f4ab..8ccfcdb 100644
--- a/backend/src/index.js
+++ b/backend/src/index.js
@@ -18,7 +18,7 @@ app.use((_req, res, next) => {
     // iCal-Feeds werden serverseitig geprosxt → nur 'self' nötig
     "connect-src 'self'",
     // data: für Avatare (base64), google.com + gstatic.com für Favicons im QuickLinks-Widget
-    "img-src 'self' data: https://www.google.com https://t1.gstatic.com https://t2.gstatic.com https://t3.gstatic.com",
+    "img-src 'self' data: https://www.google.com https://*.gstatic.com",
     "worker-src 'self'",
     "object-src 'none'",
     "base-uri 'self'",
diff --git a/frontend/src/tools/nachrichten.jsx b/frontend/src/tools/nachrichten.jsx
index 4569945..8613f91 100644
--- a/frontend/src/tools/nachrichten.jsx
+++ b/frontend/src/tools/nachrichten.jsx
@@ -168,8 +168,13 @@ export default function Nachrichten({ toast, mobile }) {
           borderRight: mobile ? 'none' : '1px solid rgba(255,255,255,0.06)',
           display:'flex', flexDirection:'column', background:'#0d0d0f', flexShrink:0,
         }}>
-          <div style={{ padding:'16px 14px 12px', borderBottom:'1px solid rgba(255,255,255,0.06)' }}>
+          <div style={{ padding:'16px 14px 12px', borderBottom:'1px solid rgba(255,255,255,0.06)',
+            display:'flex', alignItems:'center', justifyContent:'space-between' }}>
             <div style={{ ...S.head, marginBottom:0 }}>NACHRICHTEN</div>
+            <button onClick={loadUsers} title="Neu laden"
+              style={{ background:'transparent', border:'1px solid rgba(255,255,255,0.1)', borderRadius:7,
+                color:'rgba(255,255,255,0.35)', cursor:'pointer', padding:'3px 8px',
+                fontSize:13, fontFamily:'monospace', lineHeight:1 }}>↺</button>
           </div>
           <div style={{ flex:1, overflowY:'auto' }}>
             {users.length === 0 ? (