🛡️

CSP Header Editor

Visually edit Content-Security-Policy headers

Import from Website

Paste CSP Header

Directives

default-src

'self'

script-src

'self''unsafe-inline'https://cdn.example.com

style-src

'self''unsafe-inline'

img-src

'self'data:https:

font-src

'self'https://fonts.gstatic.com

connect-src

'self'https://api.example.com

frame-src

'none'

object-src

'none'

base-uri

'self'

Generated CSP Header

default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.example.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api.example.com; frame-src 'none'; object-src 'none'; base-uri 'self'

Directives: 9Total values: 16Header length: 281 chars