CSP Header Generator
Build a Content Security Policy header
Enable JavaScript to use the interactive tool.
How to use this tool · examples & limitations
Build a Content Security Policy header.
Getting a reliable result
Select directives appropriate to your application and read the generated configuration before applying it.
Limitations to check
Headers and server rules depend on your hosting environment. Test changes in staging to avoid blocking legitimate requests.
For network services, accounts and optional usage records, see our privacy policy.