diff --git a/.htaccess b/.htaccess
index 02b524352..1141da506 100644
--- a/.htaccess
+++ b/.htaccess
@@ -10,4 +10,8 @@ RewriteRule ^/?(\d+)/javadoc - [S=2]
 RewriteRule ^/?(\d+)/images/ - [S=1]
 RewriteCond $2 !=protocol
 RewriteRule ^/?(\d+)/([a-z]+)(\.html)? /$1/documentation#$2 [R=302,L,NE]
-Header set Content-Security-Policy "frame-src https://youtube.com https://www.youtube.com"
+
+# Kafka website embeds YouTube tutorial videos in many documentation pages e.g. QuickStart, Kafka Streams which using <iframe> tags.
+# Without adding YouTube domains to the CSP (Content-Security-Policy), browsers will block these iframes and videos won't display.
+# More details please check https://infra.apache.org/tools/csp.html.
+SetEnv CSP_PROJECT_DOMAINS "https://youtube.com https://www.youtube.com"