diff --git a/src/app.vala b/src/app.vala
index f8cba10bdf607b0627475ef04624a28666dde489..e03e89a3562897d1cfafb4cc3294abf7e7ba5263 100644
--- a/src/app.vala
+++ b/src/app.vala
@@ -125,6 +125,9 @@ public App () {
                                    "wrap-license", true);
         });
         add_action (action);
+
+        var webkit_context = WebKit.WebContext.get_default ();
+        webkit_context.set_sandbox_enabled (true);
     }
 
     public override void startup () {
diff --git a/src/meson.build b/src/meson.build
index 0492821dbf2e3248cd2c9f5572593fa8f637f45b..3d4302af0172151b253847c3a0620a3815783dda 100644
--- a/src/meson.build
+++ b/src/meson.build
@@ -142,7 +142,7 @@ dependencies = [
   dependency ('spice-client-gtk-3.0', version: '>= 0.32'),
   dependency ('tracker-sparql-2.0'),
   dependency ('vte-2.91', version: '>= 0.40.2'),
-  dependency ('webkit2gtk-4.0'),
+  dependency ('webkit2gtk-4.0', version: '>= 2.26.0'),
   dependency ('libhandy-0.0', version: '>= 0.0.11'),
   cc.find_library('m', required : false),
   valac.find_library ('gio-2.0-workaround', dirs: vapi_dir),