CSP security policy generator
Generate a content-security-policy response header that can be tested in the report mode for the website first.
CSP security policy generator User manual
- Fill in the parameters or select the file according to the form, and check the unit and format first.
- Allow scripts for this site and specify image sources to form a report-only policy.
- Click the processing button to view the results, you can copy or download and save.
Calculation method and processing rules
List allowed sources by resource type, fixed Object-SRC and BASE-URI limits, and reject header field injection.
scope of use
Only generate configuration text, do not modify the website; only support the listed source syntax, do not provide the report receiver, and do not guarantee the right page for you.
Will the input content be saved on the server?
This tool handles input in the browser, and does not upload files or form content. Typing practice scores are only saved in the native browser.
Why may the result be different from other tools?
Only generate configuration text, do not modify the website; only support the listed source syntax, do not provide the report receiver, and do not guarantee the right page for you. Please compare the input unit, rounding method, applicable rules and data version first.