Tools menu
Free tool
CSP Validator
Validate your Content Security Policy for syntax errors and security best practices.
#cspvalidator
#securityvalidation
#policycheck
#csptesting
4 directives · 0 errors · 2 warnings
script-src— 'unsafe-inline' allows inline scripts, which removes most of CSP's protection against XSS. Use nonces or hashes.base-uri— No base-uri. Set base-uri 'self' (or 'none') so injected <base> tags can't redirect relative URLs.frame-ancestors— No frame-ancestors. Add frame-ancestors 'self' to protect against clickjacking.
| default-src | 'self' |
| script-src | 'self' 'unsafe-inline' https://www.googletagmanager.com |
| img-src | 'self' data: https: |
| object-src | 'none' |
How to use this tool
Follow these steps to get the most out of the CSP Validator.
01
Enter your accurate data in the provided form fields.
02
Review all configuration options and settings.
03
Click the generate or proceed button to execute.
04
Copy, download, or implement the professional output.
Want it done for you?
Need a fast, well-built website rather than a tool? We design and develop sites on Astro, Next.js, WordPress and Shopify.
Website Design & DevelopmentMore in Security & Headers