@seanys, Yes the article you referenced is exactly correct. You will need to update your .htaccess with the appropriate security headers. Make sure to maintain a backup .htaccess file especially when setting up your Content Security Policy, as misconfiguration can break your site.