🛡️ Content-Security-Policy Builder & Checker

🛡️ Content-Security-Policy Builder & Checker

Build a Content-Security-Policy header from plain fields, or paste an existing policy to find quoting mistakes and common weaknesses. Nothing is fetched or sent.

1 · Build a policy

2 · Check a policy

Paste a policy and press Check policy.

Test before you enforce. A policy that is too strict breaks scripts, styles, fonts or embeds the page really needs. Ship it in report-only mode first, watch the browser console for violations, then switch to enforcing. This checker reads the policy text only; it cannot see which resources your pages load.