Setting the CSP (Content Security Policy) header on the Apache HTTP server

Add this to httpd.conf:

<IfModule mod_headers.c>
	Header set Content-Security-Policy "media-src 'blob:'; connect-src 'self' '*.yourdomain.com'; script-src 'self';"
</IfModule>

When adding multiple options, don’t forget the double quotes (““)…

20210723