How to use content security policy builder
Compose a CSP header from explicit resource-source choices. This browser tool shows the inputs, assumptions and resulting output so you can use it for a specific everyday task.
- Enter your own values or choose a supported file.
- Adjust the options and run the tool.
- Review the result, then copy, export or save it when available.
Try this next
Start with a restrictive policy, add your actual script/image origins and choose report-only while testing.
A generated header needs deployment and testing. It does not audit your application or guarantee that every browser resource will load.
Questions, answered.
Is content security policy builder free to use?
Yes. This tool is part of Nepocore’s free browser toolkit. There is no paid tier, file-download gate or application account required.
What should I check before using the result?
A generated header needs deployment and testing. It does not audit your application or guarantee that every browser resource will load.
Does this tool upload my files or text?
The tool processes its input in your browser. File contents and text are not sent to a processing server. See the privacy page for local storage and hosting details.