diff --git a/ui/admin/config/content-security-policy.js b/ui/admin/config/content-security-policy.js
index 0f157d937..3a7ac09f1 100644
--- a/ui/admin/config/content-security-policy.js
+++ b/ui/admin/config/content-security-policy.js
@@ -25,9 +25,10 @@ module.exports = function (environment) {
     if (API_HOST) policy['connect-src'].push(API_HOST);
   }
 
+  //enable csp meta tag only in dev env
   return {
     delivery: ['meta'],
-    enabled: environment !== 'test',
+    enabled: environment === 'development',
     policy,
     reportOnly: false,
   };