--- a/index.html
+++ b/index.html
@@ -9,6 +9,7 @@
          with the gesture handlers in src/core/Input.ts. -->
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover" />
     <title>Kart Royale</title>
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; connect-src 'self' data: blob:; worker-src 'self' blob:; font-src 'self'; frame-src 'none'; form-action 'none'; base-uri 'none'" />
 
     <!-- Add to Home Screen, which on a phone is worth more than it sounds.
          Safari's toolbar and tab strip occupy roughly the top 220px of a
@@ -34,7 +35,6 @@
          art asset in the repository, and iOS falls back to a snapshot of the
          page, which is a procedurally generated image of the game — exactly the
          right icon for this project and one that costs nothing. -->
-    <link rel="manifest" href="/manifest.webmanifest" />
     <style>
       * { margin: 0; padding: 0; box-sizing: border-box; }
       html, body {