diff --git a/firebase.json b/firebase.json
index ad07f9f4d..9bd8e0519 100644
--- a/firebase.json
+++ b/firebase.json
@@ -13,6 +13,18 @@
       }
     ],
     "cleanUrls": true,
-    "trailingSlash": false
+    "trailingSlash": false,
+    "headers": [
+      {
+        "source": "**/*",
+        "headers": [
+          {
+            "key": "Content-Security-Policy",
+            "value": "frame-ancestors 'none'"
+          },
+          { "key": "X-Frame-Options", "value": "DENY" }
+        ]
+      }
+    ]
   }
 }