CSP Header Generator

About This Tool

Create Content-Security-Policy (CSP) headers to protect your website from XSS attacks, data injection, and other code execution vulnerabilities.

How to Use

1. Configure each CSP directive (default-src, script-src, etc.)
2. Add allowed sources for each directive
3. Click Generate to create the CSP header
4. Add the header to your server configuration or meta tag

FAQ

What is Content-Security-Policy?

CSP is an HTTP header that tells browsers which sources of content are allowed to load on your page, preventing XSS and injection attacks.