diff --git a/CHANGELOG.md b/CHANGELOG.md
index beacac4..f4b16c8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ---
 
+## [3.0.6] — 2026-04-23
+
+### Added
+- **Security hardening** — Implemented a strict Content Security Policy (CSP) in `tauri.conf.json`. This defense-in-depth measure isolates the frontend from the open internet, preventing XSS-based data exfiltration.
+
 ## [3.0.5] — 2026-04-23
 
 ### Added
diff --git a/package.json b/package.json
index 51837cb..5b4323b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "syncspeak",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "productName": "Sync Speak",
   "description": "Real-time Hindi to English voice translator for meetings",
   "homepage": "https://github.com/Soumyadipgithub/SyncSpeak",
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index a6ca47d..029156d 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -3795,7 +3795,7 @@ dependencies = [
 
 [[package]]
 name = "syncspeak"
-version = "3.0.4"
+version = "3.0.6"
 dependencies = [
  "log",
  "serde",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index a0ea2b0..403f4ac 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "syncspeak"
-version = "3.0.5"
+version = "3.0.6"
 description = "Real-time Hindi to English voice translator for meetings"
 authors = ["Soumyadip Giri"]
 license = "MIT"
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index d147dc2..4d13e6c 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -23,7 +23,7 @@
       }
     ],
     "security": {
-      "csp": null
+      "csp": "default-src 'self'; img-src 'self' asset: https://asset.localhost data:; style-src 'self' 'unsafe-inline'; script-src 'self'; connect-src 'self' ipc: http://ipc.localhost;"
     }
   },
   "bundle": {