CSP Header Builder

Build Content Security Policy headers

Browser ProcessingYour data never leaves your browser

CSP Directives

default-src

'self'

'none'

'unsafe-inline'

'unsafe-eval'

script-src

'self'

'none'

'unsafe-inline'

'unsafe-eval'

style-src

'self'

'none'

'unsafe-inline'

img-src

'self'

data:

blob:

font-src

connect-src

frame-src

Additional Options

upgrade-insecure-requests

block-all-mixed-content

report-uri

CSP Header

Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'

Meta Tag

<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'">

About CSP Header Builder

Build Content Security Policy headers

Use this free online web & seo tools tool to work faster without installing extra software. The interface is built for quick input, clear output, and straightforward results on desktop and mobile devices.

Processing

This tool runs in your browser whenever possible, which keeps your inputs private and reduces unnecessary round-trips to the server.

Twitter Card GeneratorGenerate Twitter Card meta tags

Schema.org GeneratorGenerate JSON-LD structured data

CORS Config GeneratorGenerate CORS configuration

CSP Header Builder

CSP Directives

About CSP Header Builder

Processing

Related Tools