title: Content-Security-Policy Invalid Command
body: <p>I added the following lines to my .htacces file:</p>
  
  <pre><code>Content-Security-Policy: default-src 'self'
  X-Content-Security-Policy: default-src 'self'
  X-WebKit-CSP: default-src 'self'
  </code></pre>
  
  <p>But I always got the following error:</p>
  
  <pre><code>Invalid command 'Content-Security-Policy:', perhaps misspelled or defined by a module not included in the server configuration
  </code></pre>
  
  <p>I don't get it. Which Apache module do I have to activate? What's wrong with these lines?</p>
  
  <p>Thx,
  David</p>