Feeling Lucky
No Code Attached Yet
[#46555] - Content Security Policy missing
- Closed
- 10 Dec 2025
- Medium
- Build: 5.4-dev
- # 46555
I'm running Joomla! 5.4.1 but reaslised today I don't have a Content Security Policy entry in my global config menu. When I search my database for a com_csp reference I find nothing either.
I suspect I may be missing other items as well, how can I install CSP and check if default items are missing?
joomla-cms-bot
- | Labels |
Added:
No Code Attached Yet
|
||
brendan-pike
- comment
- 10 Dec 2025
Thank you, this would be good to include in the documentation of CSP
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2025-12-10 07:28:37 |
| Closed_By | ⇒ | brendan-pike |
brianteeman
- comment
- 10 Dec 2025
which documentation are you referring to?
There is no such thing as com_csp which i why you couldnt find it. The CSP is a plugin
For CSP navigate to System > Plugins and edit "System - HTTP Headers". You should see 2 tabs at the top "Strict-Transport-Security (HSTS)" and "Content-Security-Policy (CSP)". Click "Content-Security-Policy (CSP)" then toggle "Content Security Policy (CSP)" to enabled. You should see all the settings to configure it below that.