diff --git a/.gitmodules b/.gitmodules
index eb98bb00..4ce9522e 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,6 +1,6 @@
-[submodule "mkdocs-material-insiders"]
-	path = modules/mkdocs-material
-	url = git@github.com:privacyguides/mkdocs-material-insiders.git
 [submodule "theme/assets/brand"]
 	path = theme/assets/brand
 	url = https://github.com/privacyguides/brand.git
+[submodule "modules/mkdocs-material"]
+	path = modules/mkdocs-material
+	url = git@github.com:privacyguides/mkdocs-material-insiders.git
diff --git a/Pipfile.lock b/Pipfile.lock
index 486ff2e3..0a9ab43c 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -501,7 +501,7 @@
         },
         "mkdocs-material": {
             "path": "./modules/mkdocs-material",
-            "version": "==9.0.15+insiders.4.32.1"
+            "version": "==9.1.0+insiders.4.32.2"
         },
         "mkdocs-material-extensions": {
             "hashes": [
diff --git a/modules/mkdocs-material b/modules/mkdocs-material
index d42d5882..4f412966 160000
--- a/modules/mkdocs-material
+++ b/modules/mkdocs-material
@@ -1 +1 @@
-Subproject commit d42d5882bfe62fffb411263e04262200c7ce12d7
+Subproject commit 4f412966a61b20a0f739f999e8ee0dd48484cdbe
diff --git a/netlify.toml b/netlify.toml
index a1e52a4c..82ef433b 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -12,9 +12,14 @@
     Content-Security-Policy = "default-src 'none'; script-src https://www.privacyguides.org https://api.privacyguides.net 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src data: 'self'; connect-src https://api.github.com https://*.privacyguides.net 'self'; frame-src https://*.privacyguides.net; frame-ancestors 'none'"
 
 [[headers]]
-  for = "/about/donate/"
+  for = "/:lang/about/donate/"
   [headers.values]
-    Content-Security-Policy = "default-src 'none'; script-src https://opencollective.com https://www.privacyguides.org https://api.privacyguides.net 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src https://opencollective.com data: 'self'; connect-src https://api.github.com https://api.privacyguides.net 'self'; frame-src https://opencollective.com; frame-ancestors 'none'"
+    Content-Security-Policy = "default-src 'none'; script-src https://opencollective.com https://www.privacyguides.org https://api.privacyguides.net 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src https://opencollective.com data: 'self'; connect-src https://api.github.com https://*.privacyguides.net 'self'; frame-src https://opencollective.com; frame-ancestors 'none'"
+
+[[headers]]
+  for = "/:lang/tor/"
+  [headers.values]
+    Content-Security-Policy = "default-src 'none'; script-src https://www.privacyguides.org https://api.privacyguides.net 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src data: 'self'; connect-src https://api.github.com https://*.privacyguides.net 'self'; frame-src https://snowflake.torproject.org; frame-ancestors 'none'"
 
 [[redirects]]
     from = "/.well-known/matrix/*"