CSP Generator

Visually configure Content-Security-Policy headers with multiple directives and preset templates. Output as HTTP header or meta tag.

Preset Template

Output Format

CSP Output

This tool visually configures Content-Security-Policy security headers with multiple directive options and preset templates.

Choose a preset template or manually configure each CSP directive. Select output format and configuration is generated in real time.

CSP effectively defends against XSS attacks. The strict-dynamic directive works best with nonce/hash.