diff --git a/netlify.toml b/netlify.toml
index f072232..f197193 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -8,6 +8,7 @@
     Strict-Transport-Security = "max-age=31536000; includeSubDomains; preload"
     Cache-Control = "public, max-age=31536000"
     Referrer-Policy = "strict-origin-when-cross-origin"
+    Content-Security-Policy = "default-src https:"
     X-Content-Type-Options = "nosniff"
     X-Frame-Options = "DENY"
     X-XSS-Protection = "1; mode=block"