CSP Header Generator-- Content Security Policy

Build Content Security Policy headers interactively.

CSP Header Generator Tool

default-srcFallback for other directives
script-srcJavaScript sources
style-srcCSS stylesheet sources
img-srcImage sources
connect-srcXHR, WebSocket, fetch sources
font-srcWeb font sources
frame-srcIframe sources
1

Why Use Our CSP Generator?

7 Directives

All major CSP directives.

Real-Time

Updates as you configure.

XSS Protection

Prevent code injection.

Custom Sources

Add any domain or source.

One-Click Copy

Copy the full header.

Free Forever

No signup, no limits.

Other Security Tools

CORS Header

Generate CORS headers

Hash Generator

Generate MD5/SHA hashes

SSL Cert Decoder

Decode SSL certificates

Password Checker

Check password strength

CSP Guide

CSP (Content Security Policy) is a security mechanism that helps detect and mitigate certain types of attacks like Cross-Site Scripting (XSS) and data injection. It works by specifying which content sources the browser should trust, effectively creating a whitelist of allowed origins for scripts, styles, images, and other resources.