diff --git a/config/apache-davical.conf b/config/apache-davical.conf
index 9bc6c7da..d16a78ee 100644
--- a/config/apache-davical.conf
+++ b/config/apache-davical.conf
@@ -52,5 +52,5 @@ Alias /davical /usr/share/davical/htdocs
 
 # All content for our UI should be served locally.
 <FilesMatch "(admin|help|iSchedule|index|metrics|public|setup|tools|upgrade).php">
-  Header set Content-Security-Policy "default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'"
+  Header set Content-Security-Policy "default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'"
 </FilesMatch>
diff --git a/testing/apache-site.conf.example b/testing/apache-site.conf.example
index b022e89b..d978b1e4 100644
--- a/testing/apache-site.conf.example
+++ b/testing/apache-site.conf.example
@@ -28,6 +28,6 @@ Listen 127.0.1.1:80
 
   # All content for our UI should be served locally.
   <FilesMatch "(admin|help|iSchedule|index|metrics|public|setup|tools|upgrade).php">
-    Header set Content-Security-Policy "default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'"
+    Header set Content-Security-Policy "default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'"
   </FilesMatch>
 </VirtualHost>
diff --git a/testing/tests/regression-suite/0511-iCal-PROPFIND.result b/testing/tests/regression-suite/0511-iCal-PROPFIND.result
index de2a59e3..2361cecc 100644
--- a/testing/tests/regression-suite/0511-iCal-PROPFIND.result
+++ b/testing/tests/regression-suite/0511-iCal-PROPFIND.result
@@ -4,7 +4,7 @@ DAV: 1, 2, 3, access-control, calendar-access, calendar-schedule
 DAV: extended-mkcol, bind, addressbook, calendar-auto-schedule, calendar-proxy
 ETag: "58ac2b1da600dda0e7b2e256a8dac271"
 Content-Length: 987
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/xml; charset="utf-8"
 
 <?xml version="1.0" encoding="utf-8" ?>
diff --git a/testing/tests/regression-suite/0539-iCal4-PROPFIND.result b/testing/tests/regression-suite/0539-iCal4-PROPFIND.result
index 2b804673..6df2823c 100644
--- a/testing/tests/regression-suite/0539-iCal4-PROPFIND.result
+++ b/testing/tests/regression-suite/0539-iCal4-PROPFIND.result
@@ -4,7 +4,7 @@ DAV: 1, 2, 3, access-control, calendar-access, calendar-schedule
 DAV: extended-mkcol, bind, addressbook, calendar-auto-schedule, calendar-proxy
 ETag: "dfef5d203b227bafbee76592e8924179"
 Content-Length: 291
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/xml; charset="utf-8"
 
 <?xml version="1.0" encoding="utf-8" ?>
diff --git a/testing/tests/regression-suite/0540-iCal4-PROPFIND.result b/testing/tests/regression-suite/0540-iCal4-PROPFIND.result
index 115e4cf6..1da33598 100644
--- a/testing/tests/regression-suite/0540-iCal4-PROPFIND.result
+++ b/testing/tests/regression-suite/0540-iCal4-PROPFIND.result
@@ -4,7 +4,7 @@ DAV: 1, 2, 3, access-control, calendar-access, calendar-schedule
 DAV: extended-mkcol, bind, addressbook, calendar-auto-schedule, calendar-proxy
 ETag: "e08b84121b3f5a9294092cd23f6e5798"
 Content-Length: 304
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/xml; charset="utf-8"
 
 <?xml version="1.0" encoding="utf-8" ?>
diff --git a/testing/tests/regression-suite/0960-GET.result b/testing/tests/regression-suite/0960-GET.result
index a22e09de..a0f7f581 100644
--- a/testing/tests/regression-suite/0960-GET.result
+++ b/testing/tests/regression-suite/0960-GET.result
@@ -3,7 +3,7 @@ Date: Dow, 01 Jan 2000 00:00:00 GMT
 DAV: 1, 2, calendar-access
 Etag: "13249ced6c7527191a003f54f7e3cd25"
 Content-Length: 834
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/calendar; component=vevent; charset="utf-8"
 
 BEGIN:VCALENDAR
diff --git a/testing/tests/regression-suite/0961-REPORT-public-expanded.result b/testing/tests/regression-suite/0961-REPORT-public-expanded.result
index e5634d9e..5eb68794 100644
--- a/testing/tests/regression-suite/0961-REPORT-public-expanded.result
+++ b/testing/tests/regression-suite/0961-REPORT-public-expanded.result
@@ -3,7 +3,7 @@ Date: Dow, 01 Jan 2000 00:00:00 GMT
 DAV: 1, 2, calendar-access
 ETag: "78b61e0c261c8c2b1a8152584d73f76a"
 Content-Length: 5771
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/xml; charset="utf-8"
 
 <?xml version="1.0" encoding="utf-8" ?>
diff --git a/testing/tests/regression-suite/0965-GET.result b/testing/tests/regression-suite/0965-GET.result
index a22e09de..a0f7f581 100644
--- a/testing/tests/regression-suite/0965-GET.result
+++ b/testing/tests/regression-suite/0965-GET.result
@@ -3,7 +3,7 @@ Date: Dow, 01 Jan 2000 00:00:00 GMT
 DAV: 1, 2, calendar-access
 Etag: "13249ced6c7527191a003f54f7e3cd25"
 Content-Length: 834
-Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self' sis.redsys.es; frame-ancestors 'self'
+Content-Security-Policy: default-src 'none'; img-src 'self' data:; media-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' data:; font-src 'self' data:; object-src 'self'; base-uri 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'self'
 Content-Type: text/calendar; component=vevent; charset="utf-8"
 
 BEGIN:VCALENDAR