Configure Content-Security-Policy (CSP) headers to prevent injection attacks. Checkboxes compile directive tokens into a copyable header policy string.
Directives Checkbox Panel
default-src (Fallback rule)
self (same origin)
script-src (Javascript source)
self
unsafe-inline
style-src (Stylesheets source)
self
unsafe-inline
img-src (Images / Graphics)
self
data: (base64 uri)
https: (secure url)
Compiled CSP Policy Header
Loading...
117 B1 linesDirectives: 4 rules active