diff --git a/specification/draft/apps.mdx b/specification/draft/apps.mdx
index 96c828685..369ef64d8 100644
--- a/specification/draft/apps.mdx
+++ b/specification/draft/apps.mdx
@@ -289,6 +289,7 @@ When `_meta.ui` is present on **both**, the content-item value takes precedence.
   style-src 'self' 'unsafe-inline';
   img-src 'self' data:;
   media-src 'self' data:;
+  object-src 'none';
   connect-src 'none';
   ```