CSP Builder

Build a Content-Security-Policy header from common directives.

Free online csp builder — runs entirely in your browser. Nothing is sent to our servers.

Build a Content-Security-Policy header sketch. Test carefully — CSP breaks sites easily.

default-src

'self''none'

script-src

'self''unsafe-inline''unsafe-eval'https:

style-src

'self''unsafe-inline'https:

img-src

'self'data:https:blob:

font-src

'self'data:https:

connect-src

'self'https:wss:

frame-ancestors

'self''none'

base-uri

'self''none'

form-action

'self'

object-src

'none'

Extra connect-src hosts

Content-Security-Policy

default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.example.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';

meta tag

<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.example.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none';" />

About this tool

Use this free browser-based csp builder when you need a quick web utility without installing software. Processing stays on your device for privacy. Related searches: csp, content-security-policy, headers, security.

Need production engineering — APIs, AI, or cloud — not just a utility? Talk to Myrafy.

Services →Contact us →

Senior software engineering for startups and enterprises — Web, Mobile, AI & Cloud. Based in Noida, India. Trusted worldwide since 2009.

Noida, Uttar Pradesh, India

Services

Software Development AI & Machine Learning Cloud & DevOps Digital Transformation

Company

About Case Studies Developer Tools Engagement Models FAQ Contact us