diff --git a/app/Config/App.php b/app/Config/App.php
index db4b0a876..8af293069 100644
--- a/app/Config/App.php
+++ b/app/Config/App.php
@@ -278,7 +278,7 @@ class App extends BaseConfig
      * @see http://www.html5rocks.com/en/tutorials/security/content-security-policy/
      * @see http://www.w3.org/TR/CSP/
      */
-    public bool $CSPEnabled = false;
+    public bool $CSPEnabled = true;
 
     public function __construct()
     {