diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md
index f5b7e9a4..e86c72ec 100644
--- a/DOCUMENTATION.md
+++ b/DOCUMENTATION.md
@@ -1839,6 +1839,13 @@ An example to relax the same-origin policy:
 Access-Control-Allow-Origin = *
 ```
 
+An example to set CSP to disallow execution of unknown javascript:
+
+```ini
+Content-Security-Policy = default-src 'self'; object-src 'none'
+```
+
+
 #### [hook]
 
 ##### type