diff --git a/framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersMiddleware.cs b/framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersMiddleware.cs
index c9b0738619..f328cd27ae 100644
--- a/framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersMiddleware.cs
+++ b/framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/AbpSecurityHeadersMiddleware.cs
@@ -111,7 +111,7 @@ public class AbpSecurityHeadersMiddleware : IMiddleware, ITransientDependency
 
         var nonceStr = $" 'nonce-{nonceValue}'";
 
-        var scriptSrcValue = Options.Value.ContentSecurityPolicyValue.Split(';')
+        var scriptSrcValue = Options.Value.ContentSecurityPolicyValue?.Split(';')
             .FirstOrDefault(x => x.Trim().StartsWith(ScriptSrcKey))?.Trim();
 
         if (scriptSrcValue.IsNullOrWhiteSpace())