DevToolBoxKOSTENLOS
Blog

CSP Header Generator — Content Security Policy Builder

Build Content-Security-Policy headers with an interactive directive editor. Presets for strict, moderate, and permissive policies.

Presets
Directives
Keywords
Schemes
Custom Domains
Additional Directives
upgrade-insecure-requests
Instructs browsers to upgrade HTTP requests to HTTPS
block-all-mixed-content
Prevents loading any mixed content (HTTP on HTTPS pages)
# Configure directives above to generate your CSP header...

What is a CSP Generator?

A Content-Security-Policy generator helps you build CSP headers that protect your website from XSS, data injection, and other code injection attacks.

𝕏 Twitterin LinkedIn

Bewerten Sie dieses Tool

4.8 / 5 · 75 Bewertungen

Bleiben Sie informiert

Wöchentliche Dev-Tipps und neue Tools.

Kein Spam. Jederzeit abbestellbar.

Enjoy these free tools?

Buy Me a Coffee

How to Use

  1. Select a preset or start from scratch
  2. Configure each directive
  3. Add trusted sources
  4. Copy the CSP header

Use Cases

  • Preventing XSS attacks
  • Meeting security compliance
  • Configuring Content-Security-Policy
  • Testing CSP rules

FAQ

What directives are supported?
All standard CSP directives including default-src, script-src, style-src, img-src, and more.
Can I test my CSP?
Use report-uri directive for monitoring. This tool generates the header you need.