diff --git a/public/index.html b/public/index.html
index 7acd7fe..6039021 100755
--- a/public/index.html
+++ b/public/index.html
@@ -1,47 +1,44 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1">
-<title>The Fold Within</title>
-<link rel="stylesheet" href="/styles.css">
-<script src="https://cdn.jsdelivr.net/npm/marked@14.1.2/marked.min.js"
- integrity="sha384-Wk42AqblpWXvZ6w8XhUbJR7F85ZZAi9kZi5Lvsh5rFaDRkIl/u7jgvO6puJNLm7k"
- crossorigin="anonymous" defer></script>
-<script src="https://cdn.jsdelivr.net/npm/dompurify@3.1.6/dist/purify.min.js"
- integrity="sha384-8Whr94hA9beo1m6H5J7VGAa9M+ZMDqUoNUdD7/0+Wy3Fkg6jL1xcLyj5tQALcSD"
- crossorigin="anonymous" defer></script>
-<script src="/app.js" defer></script>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>The Fold Within</title>
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src 'self';">
+  <link rel="stylesheet" href="/styles.css">
+  <script src="https://cdn.jsdelivr.net/npm/marked@14.1.2/marked.min.js" integrity="sha384-Wk42AqblpWXvZ6w8XhUbJR7F85ZZAi9kZi5Lvsh5rFaDRkIl/u7jgvO6puJNLm7k" crossorigin="anonymous" defer></script>
+  <script src="https://cdn.jsdelivr.net/npm/dompurify@3.1.6/dist/purify.min.js" integrity="sha384-8Whr94hA9beo1m6H5J7VGAa9M+ZMDqUoNUdD7/0+Wy3Fkg6jL1xcLyj5tQALcSD" crossorigin="anonymous" defer></script>
+  <script src="/app.js" defer></script>
 </head>
 <body>
-<header class="topbar">
-  <button id="navToggle" onclick="document.querySelector('.sidebar').classList.toggle('open')">☰</button>
-  <a href="/">Home</a>
-  <a href="/about/">About</a>
-  <a href="/essays/">Essays</a>
-  <a href="/fieldnotes/">Fieldnotes</a>
-</header>
-<div class="sidebar" id="sidebar">
-  <div class="controls">
-    <select id="filter"></select>
-    <select id="sort">
-      <option value="new">Newest</option>
-      <option value="old">Oldest</option>
-      <option value="name">Name</option>
-    </select>
-  </div>
-  <input id="search" type="text" placeholder="Search...">
-  <div id="tree"></div>
-</div>
-<div class="overlay"></div>
-<main class="content">
-  <div id="meta"></div>
-  <div class="viewer" id="mdView"></div>
-  <iframe id="htmlView" sandbox></iframe>
-  <div style="display:flex;justify-content:space-between;padding:8px;">
-    <button id="prev">← Prev</button>
-    <button id="next">Next →</button>
-  </div>
-</main>
+  <header class="topbar">
+    <button id="navToggle">☰</button>
+    <a href="/">Home</a>
+    <a href="/about/">About</a>
+    <a href="/essays/">Essays</a>
+    <a href="/fieldnotes/">Fieldnotes</a>
+  </header>
+  <aside class="sidebar">
+    <div class="controls">
+      <select id="filter"></select>
+      <select id="sort">
+        <option value="new">Newest</option>
+        <option value="old">Oldest</option>
+        <option value="name">Name</option>
+      </select>
+    </div>
+    <input id="search" type="text" placeholder="Search titles...">
+    <nav id="tree"></nav>
+  </aside>
+  <div class="overlay"></div>
+  <main class="content">
+    <div id="meta" class="meta"></div>
+    <div id="mdView" class="viewer" style="display: none;"></div>
+    <iframe id="htmlView" sandbox="allow-scripts allow-forms allow-popups allow-modals allow-downloads" style="display: none;"></iframe>
+    <div style="display: flex; justify-content: space-between; padding: 8px 0;">
+      <button id="prev">← Prev</button>
+      <button id="next">Next →</button>
+    </div>
+  </main>
 </body>
 </html>
\ No newline at end of file
