diff --git a/server/electron/splash/splash.html b/server/electron/splash/splash.html
index 939f600f2..824ab21ea 100644
--- a/server/electron/splash/splash.html
+++ b/server/electron/splash/splash.html
@@ -2,8 +2,10 @@
 <html>
   <head>
     <meta charset="UTF-8" />
-    <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
-    <!-- TODO: ADD CSP -->
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; style-src 'unsafe-inline'; script-src 'self'"
+    />
     <title>ontime</title>
     <style>
       body {
