From b5e34fbe116b101667ac353fac40f08226b53fb6 Mon Sep 17 00:00:00 2001
From: Peter Bieringer <pb@bieringer.de>
Date: Fri, 20 Mar 2026 21:33:48 +0100
Subject: [PATCH] extend doc for e43388490def57a96ab2cb58471aa9444ccf0672

---
 DOCUMENTATION.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md
index f5b7e9a4..e86c72ec 100644
--- a/DOCUMENTATION.md
+++ b/DOCUMENTATION.md
@@ -1839,6 +1839,13 @@ An example to relax the same-origin policy:
 Access-Control-Allow-Origin = *
 ```
 
+An example to set CSP to disallow execution of unknown javascript:
+
+```ini
+Content-Security-Policy = default-src 'self'; object-src 'none'
+```
+
+
 #### [hook]
 
 ##### type