Put it to work
Build a Content-Security-Policy from allowed sources.
From input to output
- Open CSP builder and load the example.
- Read the format notes, choose your options, and replace the example with your input. Start with test data instead of sensitive information.
- Run the tool and inspect the result and status. If an error appears, correct the input format and run it again.
- Copy the output or download a file. Generated and converted results are not saved automatically.
CSP builder
Build a Content-Security-Policy from allowed sources. Enter space-separated sources. Test with Report-Only on your actual page first.
Example input
default-src: 'self' script-src: 'self' style-src: 'self' img-src: 'self' connect-src: 'self' frame-src: 'none' frame-ancestors: 'none'
Reading the result
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; connect-src 'self'; frame-src 'none'; frame-ancestors 'none'
Details that matter
Format and meaning
Enter space-separated sources. Test with Report-Only on your actual page first.
Supported scope and limits
Text 1 MB
Split inputs that exceed the limit. If a format or algorithm is unsupported, choose a tool that matches your requirements instead of silently changing the format.
What happens to your data?
Tools run in your browser. DNS lookup sends the queried domain to the named external provider. Ads may appear on home, guide, and workspace pages according to settings.
Open tool