diff --git a/README.md b/README.md
index 6025188..e152912 100644
--- a/README.md
+++ b/README.md
@@ -71,10 +71,12 @@ SAS_PATH=/path/to/sas/executable.exe
 
 # optional HELMET config
 # crossOriginEmbedderPolicy flag that will be passed in HELMET config
+# https://helmetjs.github.io/
 HELMET_COEP=
 
 # optional HELMET config
 # path to json file that will include HELMET `contentSecurityPolicy` directives
+# https://helmetjs.github.io/
 HELMET_CSP_CONFIG_PATH=./csp.config.json
 
 # optional