diff --git a/changelog/unreleased/fix-duplicate-csp.md b/changelog/unreleased/fix-duplicate-csp.md
new file mode 100644
index 0000000000..0c6033d180
--- /dev/null
+++ b/changelog/unreleased/fix-duplicate-csp.md
@@ -0,0 +1,5 @@
+Bugfix: Remove duplicate CSP header from responses
+
+The web service was adding a CSP on its own, and that one has been removed. The proxy service will take care of the CSP header.
+
+https://github.com/owncloud/ocis/pull/10146