diff --git a/config.js.dist b/config.js.dist
index b015b55be..103bf959b 100644
--- a/config.js.dist
+++ b/config.js.dist
@@ -17,7 +17,7 @@ module.exports = {
 /*
     httpHeaders: {
         "Content-Security-Policy": [
-            "default-serc 'none'",
+            "default-src 'none'",
             "style-src 'unsafe-inline' 'self'",
             "script-src 'self' 'unsafe-eval' 'unsafe-inline'",
             "child-src 'self' cryptpad.fr *.cryptpad.fr",