==== Content Security Policy ====
<code>nano /etc/apache/sites-available/default-ssl.conf</code>
<code>
<VirtualHost *:443>
...
Header set Content-Security-Policy "default-scr 'self';
...
</VirtualHost>
</code>