--- a/index.html
+++ b/index.html
@@ -4,6 +4,7 @@
     <title>Ghost Car Challenge</title>
     <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     <meta name="viewport" content="width=device-width" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; connect-src 'self'; frame-src 'none'; form-action 'none'; base-uri 'none'" />
     <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate">
     <meta http-equiv="Pragma" content="no-cache">
     <meta http-equiv="Expires" content="0">

--- a/js/menu.js
+++ b/js/menu.js
@@ -81,7 +81,7 @@
             document.location.reload();
             break;
         case 'Credits':
-            SC.splash('Credits', ['OK'], 'white', 'Programming, cars, tracks, textures, sounds: Dusan Halicky (https://github.com/dvhx/), Skyboxes: Zachery "skiingpenguins" Slocum (http://www.freezurbern.com) ');
+            SC.splash('Credits', ['OK'], 'white', 'Programming, cars, tracks, textures, sounds: Dusan Halicky. Skyboxes: Zachery "skiingpenguins" Slocum (CC BY-SA 3.0) and Emil Persson, aka Humus (CC BY 3.0). ');
             break;
         }
     });