diff --git a/public/index.html b/public/index.html
index c4e2378..b6c9bb2 100644
--- a/public/index.html
+++ b/public/index.html
@@ -12,6 +12,17 @@
     <meta name="HandheldFriendly" content="true" />
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
     <meta name="format-detection" content="telephone=no" />
+    <meta http-equiv="Content-Security-Policy"
+        content="default-src 'self';
+                 script-src 'self';
+                 style-src 'self' https://fonts.googleapis.com;
+                 font-src 'self' https://fonts.gstatic.com;
+                 img-src 'self' data: https:;
+                 connect-src 'self';
+                 object-src 'none';
+                 frame-ancestors 'none';
+                 base-uri 'self';">
+  <meta name="referrer" content="strict-origin-when-cross-origin">
     
     <link rel="apple-touch-icon" href="%PUBLIC_URL%/logo192.png" />
     <link rel="manifest" href="%PUBLIC_URL%/manifest.json" />
@@ -40,4 +51,4 @@
     <noscript>You need to enable JavaScript to run this app.</noscript>
     <div id="root"></div>
   </body>
-</html>
\ No newline at end of file
+</html>