Web / Security
Content Security Policy Assistant
Create a practical CSP baseline for scripts, styles, images, fonts and frames. The assistant generates Apache, Nginx or PHP example code immediately.
What does a Content Security Policy do?
A Content Security Policy defines which sources a web page is allowed to load resources from. This can limit unwanted scripts, third-party embeds and uncontrolled external dependencies.
Start with a realistic baseline, test the page in the browser and add external services deliberately. JavaScript, CSS, images, fonts, payment services, maps, videos and advertising networks must match the actual website setup.
Configure CSP
Enter allowed sources or load an example profile. Multiple sources are separated by spaces, for example 'self' https://cdn.example.org.
Generator
All input stays local in your browser. No data is sent to a server.