title: Content Security Policy [Error] Refused to load the script safari
body: <p>I am behind with CSP, this morning all sites on one of my servers stopped working with safari with the following error:</p>
  
  <blockquote>
    <p>[Error] Refused to load the script
    '<a href="http://code.jquery.com/jquery-1.9.1.js" rel="nofollow">http://code.jquery.com/jquery-1.9.1.js</a>' because it violates the
    following Content Security Policy directive: "default-src 'self'".
    Note that 'script-src' was not explicitly set, so 'default-src' is
    used as a fallback.</p>
  </blockquote>
  
  <p>How can I fix this server-wide without having to change each sites 1 by 1.</p>
  
  <p>As mentionned I am a bit behind with CSP, as such I don't even know where to put the rules</p>