diff --git a/public/index.html b/public/index.html
index 2d8be7c4..c2f5bfa7 100644
--- a/public/index.html
+++ b/public/index.html
@@ -23,12 +23,11 @@
     />
     <link href="https://fonts.cdnfonts.com/css/bad-comic" rel="stylesheet" />
     <script src="./js/jquery-3.7.0.min.js" defer></script>
-    <script src="https://cdn.jsdelivr.net/npm/canvas-confetti@1.9.2/dist/confetti.browser.min.js"></script>
     <title>EkStep</title>
 
     <!-- Content Security Policy -->
 <meta http-equiv="Content-Security-Policy" content="
-  default-src 'self';
+  default-src 'none';
   script-src 'self' https://cdn.jsdelivr.net/npm/canvas-confetti@1.9.2/dist/confetti.browser.min.js 'unsafe-eval';
   style-src 'self' https://fonts.googleapis.com https://fonts.cdnfonts.com 'unsafe-inline';
   object-src 'none';
@@ -40,6 +39,8 @@
   manifest-src 'self';
   media-src 'self' blob: https://all-prod-content-service.s3.ap-south-1.amazonaws.com;
   worker-src 'self' blob: https://d114esnbvw5tst.cloudfront.net;
+  form-action 'self';
+  frame-ancestors 'self';
 " />