diff --git a/src/main/resources/web/index.html b/src/main/resources/web/index.html
index 44e7e17..4c5f20f 100644
--- a/src/main/resources/web/index.html
+++ b/src/main/resources/web/index.html
@@ -17,7 +17,8 @@
 style-src 'self' https://cdnjs.cloudflare.com/;
 img-src 'self' data: https://crafthead.net/ https://crafatar.com/;
 connect-src 'self' http://localhost:*/ https: wss:;
-script-src 'self' https://*.cloudflare.com/ https://alcdn.msauth.net/ https://*.cloudflareinsights.com/ 'unsafe-hashes' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='"
+script-src 'self' https://*.cloudflare.com/ https://alcdn.msauth.net/ https://*.cloudflareinsights.com/ 'unsafe-hashes' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=';
+frame-src 'self' https://login.microsoftonline.com/"
           http-equiv="Content-Security-Policy">
     <meta content="no-referrer" name="referrer">
     <meta content="noindex" name="robots">