diff --git a/cors-proxy/src/index.ts b/cors-proxy/src/index.ts
index 1dc837c..74196be 100644
--- a/cors-proxy/src/index.ts
+++ b/cors-proxy/src/index.ts
@@ -218,6 +218,8 @@ const server = Bun.serve({
         status: 200,
         headers: {
           "Content-Type": "text/html; charset=utf-8",
+          "Content-Security-Policy": "frame-ancestors *",
+          "X-Frame-Options": "ALLOWALL",
         },
       });
     }