Tools

CSP config generator

This tool is for generating a valid Content Security Policy (CSP) configuration for your webserver. The Apache, nginx and IIS formats are supported. For an explanation of the different fields and their purpose, please refer to the article Secure your website with Content Security Policy.

If you would like to edit your existing configuration, you can upload it and generate a new CSP string.

default-src
connect-src
font-src
img-src
media-src
object-src
script-src
style-src
frame-src