Tools menu
Free tool
Content Security Policy (CSP) Generator
Build Content Security Policy headers to protect against XSS and other injection attacks.
Security Hardening
CSP Policy Builder
Your generated code will appear here
XSS Prevention
A Content Security Policy (CSP) adds a strong layer of defense against Cross-Site Scripting (XSS) by limiting where scripts can load from. Start with Content-Security-Policy-Report-Only and fix the reported violations before you enforce it.
How to use this tool
Follow these steps to get the most out of the Content Security Policy (CSP) Generator.
Enter your accurate data in the provided form fields.
Review all configuration options and settings.
Click the generate or proceed button to execute.
Copy, download, or implement the professional output.
In depth
Hardening Site Security with CSP
A Content Security Policy (CSP) is a powerful layer of security that helps detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks.
CSP and SEO
CSP is not a ranking signal (HTTPS is, lightly). Its value is security: it limits which scripts can run, which reduces the damage an injection attack can do. Try a strict policy in Content-Security-Policy-Report-Only mode first so it doesn't break your site.
Want it done for you?
Need a fast, well-built website rather than a tool? We design and develop sites on Astro, Next.js, WordPress and Shopify.
Website Design & DevelopmentMore in Security & Headers