diff --git a/CHANGELOG.md b/CHANGELOG.md
index c94c447..fb7efac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
All notable changes to the "jwt-debugger" extension will be documented in this file.
+## 0.4.1
+- Fix CSP: only allow the minimal amount of content that our extension needs to function
+
## 0.4.0
- Add [Content-Security-Policy](https://code.visualstudio.com/api/extension-guides/webview#content-security-policy)
diff --git a/package.json b/package.json
index d788e10..ea628be 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
"name": "jwt-debugger",
"displayName": "JWT Debugger",
"description": "JWT tokens decoder - VS Code version of jwt.io debugger",
- "version": "0.4.0",
+ "version": "0.4.1",
"license": "MIT",
"publisher": "yokawasa",
"repository": {
diff --git a/src/extension.ts b/src/extension.ts
index 782d639..f84c9a5 100644
--- a/src/extension.ts
+++ b/src/extension.ts
@@ -60,7 +60,7 @@ function getWebviewContent(token: string, header: any, payload: any) {
-
+
JWT Debugger - Decoded