1 files changed, 2 insertions, 0 deletions
diff --git a/README b/README
index 1cc687f..f0cbe29 100644
--- a/README
+++ b/README
@@ -46,6 +46,8 @@ LDAPTrustedGlobalCert CA_BASE64 /etc/ldap/ldapscert.pem
 add the following to the virtualhost config:
 
 ~~~snip~~~
+	Header always set Content-Security-Policy "default-src 'none'; connect-src 'self' wss://import.helsinki.at; img-src 'self'; script-src 'self'; style-src 'self'; font-src 'self';"
+
 	AssignUserID rduser rivendell
 
 	Include /etc/rivendell/apache-2.4.conf