All tools › Content Security Policy Generator ● Live Developer Tools

Content Security Policy Generator

Build a starter CSP header for static sites and simple apps. Everything runs locally in this tab.

Primary valueOption AOption B

Output

Content-Security-Policy: default-src 'self'; script-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'none';