diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin
index 79c6db1..0d4cb78 100644
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/86Phpldapadmin
@@ -3,8 +3,10 @@
 <Directory /usr/share/phpldapadmin>
     SSLRequireSSL on
     Options -Indexes
+    {# this is a workaround waiting for a better phpldapadmin version
+}Header set Content-Security-Policy "default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ;  style-src 'self'  'unsafe-inline' "
     AllowOverride None
-      Require { (($phpldapadmin{access} || 'private' ) eq "public" ) ?  "all granted": "ip $localAccess $externalSSLAccess";}
+    Require { (($phpldapadmin{access} || 'private' ) eq "public" ) ?  "all granted": "ip $localAccess $externalSSLAccess";}
 {
 # we use the ldap auth now
 #    AuthName "phpLdapAdmin"
diff --git a/smeserver-phpldapadmin.spec b/smeserver-phpldapadmin.spec
index 7205ca5..8d16c89 100644
--- a/smeserver-phpldapadmin.spec
+++ b/smeserver-phpldapadmin.spec
@@ -6,7 +6,7 @@ Summary: PhpLdapAdmin for SME server
 %define name smeserver-phpldapadmin
 Name: %{name}
 %define version 1.6.0
-%define release 11
+%define release 12
 Version: %{version}
 Release: %{release}%{?dist}
 License: Freely distributable
@@ -22,6 +22,9 @@ Requires: phpldapadmin >= 1.2.6
 AutoReqProv: no
 
 %changelog
+* Thu Jun 05 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6.0-12.sme
+- CSP workaround [SME: 13025]
+
 * Sun Sep 08 2024 fix-e-smith-pkg.sh by Trevor Batley <trevor@batley.id.au> 1.6.0-11.sme
 - Fix e-smith references in smeserver-phpldapadmin [SME: 12732]