HeronTool
English▾
Log in
EnglishEnglish 中文Chinese 繁體中文Chinese (Traditional) EspañolSpanish FrançaisFrench DeutschGerman PortuguêsPortuguese ItalianoItalian РусскийRussian العربيةArabic 日本語Japanese 한국어Korean हिन्दीHindi Bahasa IndonesiaIndonesian Tiếng ViệtVietnamese ไทยThai TürkçeTurkish PolskiPolish
Home › Dev Tools ›

Create a customized CSP policy for your website to prevent XSS and data injection attacks.

dev

How to Use

  1. Fill in the source directives
  2. Click generate
  3. Copy the policy into your HTTP header

Use Cases

Create a customized CSP policy for your website to prevent XSS and data injection attacks

Nothing is uploaded — all processing happens locally in your browser.

Comment / Report / My Annotations

Please sign in first — Log in

Please sign in first — Log in

Please sign in first — Log in

Related Tools
JSON Formatter Pretty-print, minify or validate JSON and spot errors. Format Regex Tester Test regular expressions live with highlighted matches. Regex Code Highlighter Paste code and highlight it into colored HTML in one click. Code HTML Encoder Encode or decode HTML entities to escape special chars. Encode URL Encoder/Decoder URL-encode or decode, handling Chinese and special chars. Encode Base64 Encoder/Decoder Base64-encode or decode text. Encode Color Converter Convert colors between HEX / RGB / HSL. Color JSON Validator Check if JSON is valid and locate errors. Validate