diff --git a/app.psgi b/app.psgi
index 05ddb519c2..75831f4a03 100644
--- a/app.psgi
+++ b/app.psgi
@@ -56,6 +56,7 @@ builder {
     enable 'ReverseProxy';
     enable '+Koha::Middleware::UserEnv';
     enable '+Koha::Middleware::SetEnv';
+    enable '+Koha::Middleware::ContentSecurityPolicy';
     enable '+Koha::Middleware::RealIP';
 
     sub {
diff --git a/debian/templates/plack.psgi b/debian/templates/plack.psgi
index f714769b54..c5480b5114 100644
--- a/debian/templates/plack.psgi
+++ b/debian/templates/plack.psgi
@@ -99,6 +99,7 @@ builder {
             enable 'LogWarn';
         }
         enable "+Koha::Middleware::CSRF";
+        enable '+Koha::Middleware::ContentSecurityPolicy';
         $opac;
     };
     mount '/intranet'      => builder {
@@ -119,6 +120,7 @@ builder {
             enable 'LogWarn';
         }
         enable "+Koha::Middleware::CSRF";
+        enable '+Koha::Middleware::ContentSecurityPolicy';
         $intranet;
     };
     mount '/intranet_svc'      => builder {
@@ -127,6 +129,7 @@ builder {
             enable 'LogWarn';
         }
         enable "+Koha::Middleware::CSRF";
+        enable '+Koha::Middleware::ContentSecurityPolicy';
         $intranet_svc;
     };
     mount '/api/v1/app.pl' => builder {