diff --git a/index.html b/index.html
index adf93c8a..e885cf7e 100644
--- a/index.html
+++ b/index.html
@@ -2,39 +2,69 @@
 <html ng-app="bit" ng-csp>
 <head>
     <meta charset="utf-8" />
-
+    <meta http-equiv="Content-Security-Policy" content="
+          default-src
+            'self';
+          script-src
+            'self'
+            https://www.google-analytics.com
+            https://js.stripe.com
+            https://maxcdn.bootstrapcdn.com
+            https://ajax.googleapis.com;
+          style-src
+            'self'
+            'unsafe-inline'
+            https://maxcdn.bootstrapcdn.com
+            https://fonts.googleapis.com;
+          img-src
+            'self'
+            data:
+            https://q.stripe.com
+            https://haveibeenpwned.com
+            https://chart.googleapis.com
+            https://www.google-analytics.com;
+          font-src
+            'self'
+            https://maxcdn.bootstrapcdn.com
+            https://fonts.gstatic.com;
+          child-src
+            'self'
+            https://js.stripe.com;
+          frame-src
+            'self'
+            https://js.stripe.com;
+          connect-src
+            *;">
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
     <base href="/" />
 
     <title page-title>bitwarden.com Password Manager</title>
 
     <script src="https://js.stripe.com/v2/"></script>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" />
-    <meta name="x-stylesheet-test-bs" content="" class="invisible" />
-    <script>!function(a,b,c){var d,e=document,f=e.getElementsByTagName('SCRIPT'),g=f[f.length-1].previousElementSibling,h=e.defaultView&&e.defaultView.getComputedStyle?e.defaultView.getComputedStyle(g):g.currentStyle;if(h&&h[a]!==b)for(d=0;d<c.length;d++)e.write('<link rel="stylesheet" href="'+c[d]+'"/>')}('visibility','hidden',['lib\/bootstrap\/css\/bootstrap.min.css?v=gehibwklnmi']);</script>
+    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"
+          integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
+    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css"
+          integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin="anonymous">
+    <meta name="x-stylesheet-test" content="" class="fa invisible" />
+    <script src="js/fallback-styles.min.js?v=3w1aal9pb9"></script>
 
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" />
-    <meta name="x-stylesheet-test-fa" content="" class="fa" />
-    <script>!function(a,b,c){var d,e=document,f=e.getElementsByTagName('SCRIPT'),g=f[f.length-1].previousElementSibling,h=e.defaultView&&e.defaultView.getComputedStyle?e.defaultView.getComputedStyle(g):g.currentStyle;if(h&&h[a]!==b)for(d=0;d<c.length;d++)e.write('<link rel="stylesheet" href="'+c[d]+'"/>')}('font-family','FontAwesome',['lib\/font-awesome\/css\/font-awesome.min.css?v=gehibwklnmi']);</script>
-
-    <link rel="stylesheet" href="css/vault.min.css?v=gehibwklnmi" />
+    <link rel="stylesheet" href="css/vault.min.css?v=3w1aal9pb9" />
 </head>
 <body ng-controller="mainController as main" class="layout-boxed skin-blue sidebar-mini {{main.bodyClass}}"
       ng-class="{'using-control-sidebar': main.usingControlSidebar,
       'control-sidebar-open': main.usingControlSidebar && main.openControlSidebar}">
     <div ui-view></div>
 
-    <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
-    <script>(window.jQuery||document.write('<script src="lib\/jquery\/jquery.min.js?v=gehibwklnmi"><\/script>'));</script>
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"
+            integrity="sha384-rY/jv8mMhqDabXSo+UCggqKtdmBfd3qC2/KvyTDNQ6PcUJXaxK1tMepoQda4g5vB" crossorigin="anonymous"></script>
+    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"
+            integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.6.3/angular.min.js"
+            integrity="sha384-AH/e+s4V4kUifvnNED2x1XZqArO5qTFU4YKRzUXbz4IgPG1H0Xmz6fP1XUmO4vT/" crossorigin="anonymous"></script>
+    <script src="js/fallback-scripts.min.js?v=3w1aal9pb9"></script>
 
-    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
-    <script>((window.jQuery&&window.jQuery.fn&&window.jQuery.fn.modal)||document.write('<script src="lib\/bootstrap\/js\/bootstrap.min.js?v=gehibwklnmi"><\/script>'));</script>
-
-    <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.6.3/angular.min.js"></script>
-    <script>(window.angular||document.write('<script src="lib\/angular\/angular.min.js?v=gehibwklnmi"><\/script>'));</script>
-
-    <script src="js/lib.min.js?v=gehibwklnmi"></script>
-    <script src="js/bw.min.js?v=gehibwklnmi"></script>
-    <script src="js/app.min.js?v=gehibwklnmi"></script>
+    <script src="js/lib.min.js?v=3w1aal9pb9"></script>
+    <script src="js/bw.min.js?v=3w1aal9pb9"></script>
+    <script src="js/app.min.js?v=3w1aal9pb9"></script>
 </body>
 </html>
diff --git a/js/fallback-scripts.min.js b/js/fallback-scripts.min.js
new file mode 100644
index 00000000..09fa53f3
--- /dev/null
+++ b/js/fallback-scripts.min.js
@@ -0,0 +1 @@
+function loadScriptIfMissing(i,n){i||document.write('<script src="'+n+"?v="+cacheTag+'"><\/script>')}loadScriptIfMissing(window.jQuery,"lib/jquery/jquery.min.js"),loadScriptIfMissing(window.jQuery&&window.jQuery.fn&&window.jQuery.fn.modal,"lib/bootstrap/js/bootstrap.min.js"),loadScriptIfMissing(window.angular,"lib/angular/angular.min.js");
\ No newline at end of file
diff --git a/js/fallback-styles.min.js b/js/fallback-styles.min.js
new file mode 100644
index 00000000..912afd1f
--- /dev/null
+++ b/js/fallback-styles.min.js
@@ -0,0 +1 @@
+function loadStylesheetIfMissing(e,t,s){var i=document.getElementsByTagName("SCRIPT"),l=i[i.length-1].previousElementSibling,n=document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getComputedStyle(l):l.currentStyle;if(n&&n[e]!==t)for(var o=0;o<s.length;o++)document.write('<link rel="stylesheet" href="'+s[o]+"?v="+cacheTag+'" />')}var cacheTag="3w1aal9pb9";loadStylesheetIfMissing("visibility","hidden",["lib/bootstrap/css/bootstrap.min.css"]),loadStylesheetIfMissing("fontFamily","FontAwesome",["lib/font-awesome/css/font-awesome.min.css"]);
\ No newline at end of file
diff --git a/js/settings.min.js b/js/settings.min.js
new file mode 100644
index 00000000..e4acc649
--- /dev/null
+++ b/js/settings.min.js
@@ -0,0 +1 @@
+angular.module("bit").constant("appSettings",{apiUri:"https://api.bitwarden.com",identityUri:"https://identity.bitwarden.com",stripeKey:"pk_live_bpN0P37nMxrMQkcaHXtAybJk",version:"1.13.0",environment:"Production"});
\ No newline at end of file
