diff --git a/rbi/annotations/actionpack.rbi b/rbi/annotations/actionpack.rbi
index c2bba859..dc185035 100644
--- a/rbi/annotations/actionpack.rbi
+++ b/rbi/annotations/actionpack.rbi
@@ -4,6 +4,17 @@ class ActionController::API
   MODULES = T.let(T.unsafe(nil), T::Array[T.untyped])
 end
 
+module ActionController::ContentSecurityPolicy::ClassMethods
+  sig do
+    params(
+      enabled: T.untyped,
+      options: T.untyped,
+      block: T.nilable(T.proc.params(policy: ActionDispatch::ContentSecurityPolicy).void)
+    ).void
+  end
+  def content_security_policy(enabled = true, **options, &block); end
+end
+
 module ActionController::Flash::ClassMethods
   sig { params(types: Symbol).void }
   def add_flash_types(*types); end
@@ -210,6 +221,13 @@ class ActionController::Parameters
   def values_at(*keys); end
 end
 
+module ActionController::PermissionsPolicy::ClassMethods
+  sig do
+    params(options: T.untyped, block: T.nilable(T.proc.params(policy: ActionDispatch::PermissionsPolicy).void)).void
+  end
+  def permissions_policy(**options, &block); end
+end
+
 module ActionController::RequestForgeryProtection
   private