diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index fe670f44..858a0247 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -4,6 +4,8 @@ server {
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
   add_header X-Content-Type-Options    "nosniff"                          always;
   add_header Referrer-Policy           "strict-origin-when-cross-origin"  always;
+  add_header X-Frame-Options "DENY" always;
+  add_header Content-Security-Policy "default-src 'self'; connect-src 'self' ws: wss: https:; media-src 'self' blob:; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self';" always;
   location / {
     root /usr/share/nginx/html;
     index index.html;