CSP Generator

Draft a Content-Security-Policy header from selected directive allowlists.


Suggested Tools


About


CSP Generator helps lock down script/style sources against XSS while you iterate on policy.

Pick directives, run, and copy the CSP header value into your server config.

Please enable JavaScript.