Options FollowSymLinks AllowOverride All Require all granted RemoveType .html .htm AddType text/html .html AddType text/html .htm RemoveType .svg .svgz AddType image/svg+xml .svg AddType image/svg+xml .svgz #Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; img-src * data:; font-src 'self' data:;" DocumentRoot /var/www/html UseCanonicalName On DocumentRoot /var/www/html UseCanonicalName On