diff --git a/test/vhosts/server.localhost.conf b/test/vhosts/server.localhost.conf
index fdbb837..b345333 100644
--- a/test/vhosts/server.localhost.conf
+++ b/test/vhosts/server.localhost.conf
@@ -19,6 +19,7 @@ server {
 
   gzip_min_length 1;
 
+  include h5bp/security/content-security-policy.conf;
   include h5bp/location/web_performance_filename-based_cache_busting.conf;
   include h5bp/location/web_performance_svgz-compression.conf;
   include h5bp/errors/custom_errors.conf;