Content Security Policy (CSP) Generator

This is, excuse me, a damn fine extension. I've used I can't tell you how many extensions in my life and this is one of the best.

helpful tool, thank you

Should simple and handy, in fact it doesn't work at all. But of course want to collect your email, ask you to register and other scum marketing things. not worth a try.

Stuart LarsenDeveloperDec 14, 2023

Good Morning Alex, in what way does it not work? Also, the email is not used for marketing purposes and optional, it is to email yourself the final generated report policy since they are usually large with many issues.

looks like a really helpful tool. at one point it broke access to my site though and pages would not load

I found this extension very useful, but it stopped working. It was working month or two ago, but now it is not generating policies at all

$7 per month .. should be stated upfront.. looks handy tool but dont like being tricked into having to pay for simple 1 time report.

Stuart LarsenDeveloperDec 28, 2020

Hey Neo, Thanks for the comment. The report is free. In the last stage of the chrome extension you're able to email yourself the report and policy for free, no signup required. After you have your free report/policy you're welcome to sign up for a free 14 day trial to use the advance features (monitoring/alerting/etc). After the 14 day trial the product cost $7/month. Cheers, Stuart Csper Founder

It was surprisingly easy to generate a content security policy with this tool with my limited csp knowledge. Thanks for creating this extension!

Super helpful extension! Finding edge cases in CSP is definitely annoying, but this saved me a lot of time. I think there were some edge cases with blobs that weren't covered, but great product nonetheless.

Made it really easy to add a CSP to the site I'm building. I had to make sure I hit every possible interaction, but this cut down the iteration time for finding violations so much I'm not sure I can even estimate it. I'm sure I'll still find some violations from oddball browser combinations, but sending the reports to csper.io makes it easy to track and add those as they come in.