CSP Builder
Build and analyze Content-Security-Policy headers visually.
Generated Header
default-src 'self'
Add to your server:
Content-Security-Policy: default-src 'self' Fallback for all resource types
'self'
JavaScript sources
CSS stylesheet sources
Image sources
Font file sources
XHR, fetch, WebSocket origins
Audio and video sources
Plugin sources (Flash, Java)
iframe sources
Who can embed this page
Restrict <base> element URLs
Form submission targets
Web Worker sources
App manifest sources
Related Tools
H> HTTP Header Analyzer
Analyze HTTP headers for security issues, caching behavior, and CORS configuration with fix snippets.
IP IP / CIDR Calculator
Calculate subnets, host ranges, and masks for IPv4 CIDR notation with visual binary breakdown.
TS JSON to TypeScript
Generate TypeScript interfaces from JSON data. Handles nested objects, arrays, nullable fields.