Web Platform

CSP Builder

Compose Content Security Policy directives locally and inspect the resulting header.

Parse Existing Header

Directives

0 active
default-src
script-src
style-src
img-src
font-src
connect-src
media-src
object-src
frame-src
child-src
worker-src
manifest-src
base-uri
form-action
frame-ancestors
navigate-to
report-uri
report-to
upgrade-insecure-requests inactive

This directive is emitted without any values.

block-all-mixed-content inactive

This directive is emitted without any values.

Tags

cspsecurityheaders

Related Tools