diff --git a/web/staticwebapp.config.json b/web/staticwebapp.config.json
index 0187b16d5..dcc203d30 100644
--- a/web/staticwebapp.config.json
+++ b/web/staticwebapp.config.json
@@ -2,5 +2,8 @@
   "navigationFallback": {
     "rewrite": "/index.html"
   },
-  "trailingSlash": "never"
-}
+  "trailingSlash": "never",
+  "globalHeaders": {
+    "Content-Security-Policy": "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; manifest-src 'self';"
+  }
+}
\ No newline at end of file