Content Security Policy Generator

Compose a CSP header from common source directives.

Private-first · runs on your device Ready

script-srcstyle-srcimg-srcconnect-srcframe-ancestors Upgrade insecure requests

Content-Security-Policy value

default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; upgrade-insecure-requests;

Test CSP in Report-Only mode first on complex sites; strict policies can break third-party scripts, fonts, frames, and APIs.

How it works

Content Security Policy Generator is designed to give you the result immediately. The calculation or processing happens on your device for this tool, so normal use does not require an account or a file upload.

Privacy

This tool is marked offline-capable. Your inputs are used in the current browser/app session and are not required to be sent to Wiunix Tools to perform the operation.