diff --git a/lib/App/routePage.js b/lib/App/routePage.js
index 1ce5ef5..0cb5604 100644
--- a/lib/App/routePage.js
+++ b/lib/App/routePage.js
@@ -18,12 +18,12 @@ const fastCompressionOptions = {
 }
 
 const mobileMetaTag = '<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, user-scalable=yes">'
-const manifestTag = '<link rel="manifest" href="manifest.json">'
+const manifestTag = '<link rel="manifest" href="/manifest.json">'
 
 // const styleTag = '<link rel="stylesheet" href="/styles.css">'
 const styleTag = '<link rel="preload" href="/styles.css" as="style" onload="this.rel=\'stylesheet\'">'
 const scriptTag = '<script src="/scripts.js"></script>'
-const styleLoaderPolyfill = '<script>let _rel=document.createElement("link").relList;if(!_rel||!_rel.supports||!_rel.supports("preload")){let l=document.createElement("link");l.href="/styles.css";l.rel="stylesheet";document.head.appendChild(l)}</script>'
+const styleLoaderPolyfill = '<script>let _r=document.createElement("link").relList;if(!_r||!_r.supports||!_r.supports("preload")){let l=document.createElement("link");l.href="/styles.css";l.rel="stylesheet";document.head.appendChild(l)}</script>'
 
 module.exports = function(page) {
 	// Register page
@@ -68,13 +68,13 @@ module.exports = function(page) {
 	const headers = Object.assign({
 		'Content-Type': 'text/html;charset=utf-8',
 		'Link': '</styles.css>; rel=preload; as=style,</scripts.js>; rel=preload; as=script',
-		// 'Content-Security-Policy': 'default-src https: \'unsafe-inline\' \'unsafe-eval\'',
-		'Server': 'Aero',
-		'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
 		'Vary': 'Accept-Encoding',
+		'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
+		// 'Content-Security-Policy-Report-Only': 'default-src https:',
 		'X-Content-Type-Options': 'nosniff',
 		'X-Frame-Options': 'SAMEORIGIN',
-		'X-XSS-Protection': '1; mode=block'
+		'X-XSS-Protection': '1; mode=block',
+		'Server': 'Aero'
 	}, this.config.headers)
 
 	// Allow resource loading on self-signed certificates