diff -ru tree/src/assets/index.html mod/src/assets/index.html
--- tree/src/assets/index.html	2017-06-21 10:25:32.000000000 -0300
+++ mod/src/assets/index.html	2026-11-02 20:05:27.878079661 -0300
@@ -4,8 +4,9 @@
 <head>
   <meta charset="UTF-8" />
   <title>Hexa Battle</title>
-  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/normalize/4.2.0/normalize.min.css">
-  <link href="https://fonts.googleapis.com/css?family=VT323" rel="stylesheet">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'none'; form-action 'none'; base-uri 'none'">
+  <link rel="stylesheet" href="./normalize.css">
+  <link rel="stylesheet" href="./vt323.css">
 </head>
 
 <body>
diff -ru tree/webpack.config.js mod/webpack.config.js
--- tree/webpack.config.js	2017-06-21 10:25:32.000000000 -0300
+++ mod/webpack.config.js	2026-11-02 20:05:27.877870531 -0300
@@ -12,7 +12,7 @@
 
   output: {
     path: path.resolve('./build'),
-    publicPath: '/static/',
+    publicPath: './',
     filename: 'bundle.js',
   },
 
@@ -49,7 +49,7 @@
 
 if (PRODUCTION) {
   config = merge(config, {
-    devtool: '#source-map',
+    devtool: false,
   });
 }