diff --git a/src/index.html b/src/index.html
index d648f5601d..f34aa2f3c4 100644
--- a/src/index.html
+++ b/src/index.html
@@ -1,5 +1,5 @@
 ﻿<!DOCTYPE html>
-<html ng-app="bit">
+<html ng-app="bit" ng-csp>
 <head>
     <meta charset="utf-8" />
     <meta http-equiv="Content-Security-Policy" content="
@@ -27,6 +27,9 @@
             'self'
             https://maxcdn.bootstrapcdn.com
             https://fonts.gstatic.com;
+          child-src
+            'self'
+            https://js.stripe.com;
           frame-src
             'self'
             https://js.stripe.com;
diff --git a/src/less/theme.less b/src/less/theme.less
index d136932c9c..20a8764623 100644
--- a/src/less/theme.less
+++ b/src/less/theme.less
@@ -1,5 +1,6 @@
 ﻿@import url(https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,300italic,400italic,600italic);
 @import "../../node_modules/angular-toastr/src/toastr.less";
+@import (less) "../../node_modules/angular/angular-csp.css";
 
 /* Start AdminLTE */
 
