ToolToUse

Website / SEO Tools

Content-Security-Policy Builder

Build a Content-Security-Policy header for Apache, nginx or a meta tag.

Website / SEO Tools

Content-Security-Policy Builder

Local only
Everything stays in your browser

Your text is processed on your device — nothing is uploaded to a server.

How it works

Empty directives are left out (they fall back to default-src). Warns about 'unsafe-inline', 'unsafe-eval' and bare *. Start in report-only mode.

Good to know

Frequently asked questions

How do I use it?

Fill in the options and press “Build policy”. Check the result, then copy or download it.

How does it work?

Empty directives are left out (they fall back to default-src). Warns about 'unsafe-inline', 'unsafe-eval' and bare *. Start in report-only mode.

Is my data uploaded?

No. Everything is processed in your browser and nothing is sent to a server. No account is needed.

Keep exploring

View all