diff --git a/src/index.html b/src/index.html
index a3dd13da..662e1dff 100644
--- a/src/index.html
+++ b/src/index.html
@@ -16,11 +16,11 @@
 <html lang="@@DEFAULT_LANGUAGE" ng-app="openlmis" manifest="manifest.appcache" xmlns="http://www.w3.org/1999/html">
     <head>
         <meta charset="utf-8">
-        <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' https://superset-uat.openlmis.org/*;
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' https://superset-uat.openlmis.org;
                img-src 'self' www.google-analytics.com;
                script-src 'self' www.google-analytics.com 'unsafe-inline';
                connect-src 'self' www.google-analytics.com https://superset-uat.openlmis.org;
-               frame-src 'self' https://superset-uat.openlmis.org/*;" />
+               frame-src 'self' https://superset-uat.openlmis.org;" />
         <meta http-equiv="X-Content-Type-Options" content="nosniff" />
         <meta http-equiv="Referrer-Policy" content="no-referrer" />
         <meta http-equiv="Permissions-Policy" content="geolocation=(), microphone=()" />
