diff --git a/ops/nginx/conf.d.dev/filterlists.conf b/ops/nginx/conf.d.dev/filterlists.conf
index 147533120..413d73315 100644
--- a/ops/nginx/conf.d.dev/filterlists.conf
+++ b/ops/nginx/conf.d.dev/filterlists.conf
@@ -2,6 +2,8 @@ server {
   listen 80 default_server;
 
   include svr-includes/*;
+
+  add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always;
   
   location ^~ /api {
     rewrite ^/api/(.*)$ /$1 break;
diff --git a/ops/nginx/conf.d/filterlists.conf b/ops/nginx/conf.d/filterlists.conf
index 16ac965df..86b563b1d 100644
--- a/ops/nginx/conf.d/filterlists.conf
+++ b/ops/nginx/conf.d/filterlists.conf
@@ -3,10 +3,12 @@ server {
   server_name filterlists.com;
 
   include svr-includes/*;
-  
+
   ssl_certificate /etc/nginx/cert/filterlists_cert.pem;
   ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;
 
+  add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always;
+
   location ^~ /api {
     rewrite ^/api/(.*)$ /$1 break;
     proxy_pass         http://api:80;
diff --git a/src/FilterLists.Web/Dockerfile b/src/FilterLists.Web/Dockerfile
index 44097fcca..a6dd8bcb4 100644
--- a/src/FilterLists.Web/Dockerfile
+++ b/src/FilterLists.Web/Dockerfile
@@ -14,7 +14,7 @@ RUN npm install --only=prod
 
 # build
 COPY src/FilterLists.Web/. ./
-RUN npm run build
+RUN INLINE_RUNTIME_CHUNK=false npm run build
 
 # final
 FROM base as final