diff --git a/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript b/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
index 8e05ac73..25e3a1fc 100644
--- a/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
+++ b/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
@@ -85,9 +85,9 @@ config {
     compressCss = 1
     typolinkEnableLinksAcrossDomains = 1
     additionalHeaders {
-        10 {
-            header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
-        }
+#        10 {
+#            header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self';
+#        }
         20 {
             header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
         }
diff --git a/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript b/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
index 3887c057..06518597 100644
--- a/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
+++ b/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
@@ -103,9 +103,9 @@ config {
     content_from_pid_allowOutsideDomain = 1
     inlineStyle2TempFile = 0
     additionalHeaders {
-        10 {
-            header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
-        }
+#        10 {
+#            header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self' https://my.ep-reisen.de/;
+#        }
         20 {
             header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
         }