diff --git a/hugo.yaml b/hugo.yaml
index d781d0d..cc04068 100644
--- a/hugo.yaml
+++ b/hugo.yaml
@@ -34,6 +34,7 @@ server:
     - for: /**
       values:
         Referrer-Policy: strict-origin-when-cross-origin
+        content_security_policy: "script-src 'self' 'unsafe-eval' https://oldwoodman.com; object-src 'self'",
 module:
   mounts:
     - source: assets