diff --git a/config/environment.js b/config/environment.js
index c61fce3..43ef4fb 100644
--- a/config/environment.js
+++ b/config/environment.js
@@ -30,6 +30,15 @@ module.exports = function(environment) {
       crossOriginWhitelist: ['http://127.0.0.1:8901']
     }
     ENV.apiURL = 'http://127.0.0.1:8901';
+    ENV.contentSecurityPolicy = {
+      'default-src': "'none'",
+      'script-src': "'self'",
+      'font-src': "'self'",
+      'connect-src': "'self' http://127.0.0.1:8901",
+      'img-src': "'self'",
+      'style-src': "'self'",
+      'media-src': "'self'"
+    }
   }
 
   if (environment === 'test') {