CSP Header Generator Online - Content Security Policy Builder

Free online Content Security Policy header generator. Build CSP directives with an intuitive checkbox interface.

Directives

Default-Src

Script-Src

Style-Src

Img-Src

Font-Src

Connect-Src

Frame-Src

Object-Src

Media-Src

Child-Src

Output Formats

HTTP Header

Content-Security-Policy: Default-Src self; Script-Src self; Style-Src self unsafe-inline; Img-Src self data https; Font-Src self; Connect-Src self; Frame-Src none; Object-Src none

HTML Meta Tag

<meta http-equiv="Content-Security-Policy" content="Default-Src self; Script-Src self; Style-Src self unsafe-inline; Img-Src self data https; Font-Src self; Connect-Src self; Frame-Src none; Object-Src none">

Nginx Config

add_header Content-Security-Policy "Default-Src self; Script-Src self; Style-Src self unsafe-inline; Img-Src self data https; Font-Src self; Connect-Src self; Frame-Src none; Object-Src none";

CSP Header Generator

Build Content Security Policy headers

Features

Configurable CSP directives (default-src, script-src, style-src, etc.)
Preset policies: Strict, Moderate, Permissive
Support for common values: self, unsafe-inline, unsafe-eval, data, https
Custom directive values
Multiple output formats: HTTP header, HTML meta tag, Nginx config
One-click copy to clipboard
Real-time policy generation

𝕏 Twitter in LinkedIn

评价此工具

4.7 / 5 · 113 人评价

保持更新

获取每周开发技巧和新工具通知。

无垃圾邮件，随时退订。

Enjoy these free tools?

☕Buy Me a Coffee

How to Use CSP Header Generator

Configure your CSP Header Generator settings and parameters
Adjust options to customize the output to your needs
Click Generate to create your output
Copy the generated result or download it for use

Common Use Cases

Creating Content Security Policy headers for web applications
Preventing XSS attacks with proper CSP directives
Configuring CSP for sites with third-party scripts
Testing and debugging Content Security Policy rules

Frequently Asked Questions

Is CSP Header Generator free to use?

Yes, CSP Header Generator is completely free with no signup required. You can use it as many times as you need.

Is my data safe when using CSP Header Generator?

Absolutely. All processing happens directly in your browser. Your data is never sent to any server or stored anywhere.

Can I customize the generated output?

Yes, CSP Header Generator provides various configuration options to customize the output to match your specific requirements.

Can I use the generated output in my projects?

Yes, all generated output is free to use in any personal or commercial project without attribution.

Does the generator handle edge cases?

Yes, CSP Header Generator is designed to handle common edge cases and produce valid, standards-compliant output.