Free Content-Security-Policy Generator
Create CSP headers to protect your website from cross-site scripting (XSS), clickjacking, and other code injection attacks. Export for Nginx, Apache, Next.js, or Vercel.
Features
- Visual Builder: Point-and-click directive configuration
- Multiple Formats: HTTP header, meta tag, Nginx, Apache, Next.js, Vercel
- Common Sources: Quick-add Google, Cloudflare, Stripe, and more
- Report URI: Configure violation reporting
- Best Practices: Secure defaults with customization
What is CSP?
Content-Security-Policy is an HTTP header that helps prevent XSS attacks by specifying which sources of content (scripts, styles, images, etc.) are allowed to load on your page.