diff --git a/app/public/_headers b/app/public/_headers
index f8f31def1..1b6f0bf9b 100644
--- a/app/public/_headers
+++ b/app/public/_headers
@@ -4,6 +4,7 @@
     Content-Security-Policy: frame-ancestors 'none'
     X-Frame-Options: DENY
     Cache-Control: public,max-age=31536000
+    cant-be-evil: true
 /static/*
     Cache-Control: public,max-age=31536000,immutable
 /static/**/*