diff --git a/src/index.ejs b/src/index.ejs
index 038ae669..48608f02 100644
--- a/src/index.ejs
+++ b/src/index.ejs
@@ -1,24 +1,29 @@
 <!DOCTYPE html>
 <html>
-  <head>
-    <meta charset="utf-8">
-    <title>Thermal</title>
-    <% if (htmlWebpackPlugin.options.nodeModules) { %>
-      <!-- Add `node_modules/` to global paths so `require` works properly in development -->
-      <script>
-        require('module').globalPaths.push('<%= htmlWebpackPlugin.options.nodeModules.replace(/\\/g, '\\\\') %>')
-      </script>
-    <% } %>
-  </head>
-  <body>
-    <div id="app"></div>
-    <!-- Set `__static` path to static files in production -->
-    <% if (!process.browser) { %>
-      <script>
-        if (process.env.NODE_ENV !== 'development') window.__static = require('path').join(__dirname, '/static').replace(/\\/g, '\\\\')
-      </script>
-    <% } %>
 
-    <!-- webpack builds are automatically injected -->
-  </body>
+<head>
+	<meta charset="utf-8">
+	<title>Thermal</title>
+	<% if (htmlWebpackPlugin.options.nodeModules) { %>
+	<!-- Add `node_modules/` to global paths so `require` works properly in development -->
+	<script>
+		require('module').globalPaths.push('<%= htmlWebpackPlugin.options.nodeModules.replace(/\\/g, '\\\\') %>')
+	</script>
+	<% } %>
+	<meta http-equiv="Content-Security-Policy"
+		content="report-uri https://sentry.io/api/1422446/security/?sentry_key=c3fb5f4c94aa4921a71b5fb887e1cfac">
+</head>
+
+<body>
+	<div id="app"></div>
+	<!-- Set `__static` path to static files in production -->
+	<% if (!process.browser) { %>
+	<script>
+		if (process.env.NODE_ENV !== 'development') window.__static = require('path').join(__dirname, '/static').replace(/\\/g, '\\\\')
+	</script>
+	<% } %>
+
+	<!-- webpack builds are automatically injected -->
+</body>
+
 </html>
