utility / HTTP
CSP Header Builder
Build Content-Security-Policy headers with a visual directive editor.
Runs locally
LOCAL WORKBENCH
Content Security Policy (CSP) Builder
100% Local
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-ancestors 'none';
Continue the thread
Related utilities
Field notes
Before you use it
What is CSP?+
Content-Security-Policy is an HTTP header that restricts which resources a browser can load, mitigating XSS and injection attacks.