diff --git a/homepage/header.template.html b/homepage/header.template.html
index 28fde8fe6c0ce50b9e3c2feaf6c03b85d287285f..d213d86ba42b9735d878e0d6c7bd550fed254d7a 100644
--- a/homepage/header.template.html
+++ b/homepage/header.template.html
@@ -17,10 +17,12 @@
<link rel="stylesheet" href="/static/style.css">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
- <meta http-equiv="Content-Security-Policy" content="default-src: 'none'; script-src 'self'">
+ <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; content-src 'self'; img-src 'self'; style-src 'self'; base-uri 'self'; form-action 'self'">
+ <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin">
+ <meta http-equiv="Feature-Policy" content="microphone 'none'; camera 'none'">
<title>BecskasszáSCH</title>
</head>
<body class="{{ if .Dark }}dark{{ else }}light{{ end }}">
-{{ end }}
\ No newline at end of file
+{{ end }}