CSP Builder
Build Content-Security-Policy header safely.
Directives Configuration
default-src Fallback for other fetch directives.
script-src Valid sources for JavaScript.
style-src Valid sources for stylesheets.
img-src Valid sources for images.
connect-src Restricts URLs loaded using script interfaces (APIs, WebSockets).
font-src Valid sources for web fonts.
object-src Valid sources for plugins (e.g. flash, Java applets).
media-src Valid sources for audio and video.
frame-src Valid sources for frames/iframes.
sandbox Applies sandbox restriction policies.
Generated CSP Header
Meta Tag Configuration
Related Tools
UTM Builder
Runs locally
Generate UTM-tagged URLs.
CORS Header Builder
Runs locally
Build/explain CORS headers.
Cookie Parser
Runs locally
Parse Cookie and Set-Cookie headers.
Robots.txt Generator
Runs locally
Generate robots.txt rules.
Schema.org JSON-LD Generator
Runs locally
Generate common JSON-LD snippets.