As part of our ongoing efforts to keep a high standard of security our system adopts a strict Content Security Policy (CSP). Some days prior to the incident one of our clients requested the ability to use certain features of our embedded google maps tool, this required the introduction of a new directive to our CSP. This introduction exceeded a hard cap on the size of the CSP HTTP header leveraged by Nginx as a reverse server proxy. This caused a server error response from Nginx. The system was rolled back and the system state was restored.