diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index aa49407c8..b684fa7f7 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -1 +1,6 @@
-GovukContentSecurityPolicy.configure
+# Evenatually we'll want to use the GOV.UK Content Security Policy in this app,
+# however as of January 2023 we're scoping it to only frontend apps
+#
+# More info: https://docs.publishing.service.gov.uk/manual/content-security-policy.html
+#
+# GovukContentSecurityPolicy.configure