diff --git a/Caddyfile b/Caddyfile
index 384dc20..c116d2c 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -10,16 +10,15 @@
   }
   header / {
     Content-Security-Policy "
-      base-uri 'none';
+      base-uri 'self';
       connect-src 'self' commento.msfjarvis.dev;
-      default-src 'none';
+      default-src 'self';
       frame-ancestors 'none';
-      form-action 'self';
-      font-src 'self' data: fonts.gstatic.com commento.msfjarvis.dev;
-      img-src data: 'self' gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
+      font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
+      img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
       object-src 'none';
-      script-src 'self' commento.msfjarvis.dev;
-      style-src 'self' fonts.googleapis.com commento.msfjarvis.dev;
+      script-src 'self' commento.msfjarvis.dev 'sha256-o7J3VkM1HdcyiYXa81laTjuC7e15LtXtTRm8x3cx2cw' 'nonce-Y2xvYWtlbWFpbAo=';
+      style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com 'sha256-PjBkwE8xcYZAp+HsnzzOVNqa/Ra+/v1Fnx6f0PW6ic4=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'nonce-Y2xvYWtlbWFpbAo=';
     "
     # Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
     Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"