diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpHeaderNames.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpHeaderNames.java
index 5a6a024606..205316bf38 100644
--- a/codec-http/src/main/java/io/netty/handler/codec/http/HttpHeaderNames.java
+++ b/codec-http/src/main/java/io/netty/handler/codec/http/HttpHeaderNames.java
@@ -144,6 +144,10 @@ public final class HttpHeaderNames {
      * {@code "content-range"}
      */
     public static final AsciiString CONTENT_RANGE = new AsciiString("content-range");
+    /**
+     * {@code "content-security-policy"}
+     */
+    public static final CharSequence CONTENT_SECURITY_POLICY = new AsciiString("content-security-policy");
     /**
      * {@code "content-type"}
      */
@@ -346,6 +350,10 @@ public final class HttpHeaderNames {
      * {@code "www-authenticate"}
      */
     public static final AsciiString WWW_AUTHENTICATE = new AsciiString("www-authenticate");
+    /**
+     * {@code "x-frame-options"}
+     */
+    public static final CharSequence X_FRAME_OPTIONS = new AsciiString("x-frame-options");
 
     private HttpHeaderNames() { }
 }