Overview
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses. CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.
Josh BarberSep 13, 2024
Was great until it stopped working for me. Please fix and I'll change my rating
Paulo LimaSep 12, 2024
I this thing stopped working :/
Barbara RenowdenMar 21, 2024
I have a CSP but this doesn't detect it. So disappointed.
Details
- Version0.3.2
- UpdatedJuly 12, 2024
- Offered byLukas Weichselbaum
- Size297KiB
- LanguagesEnglish
- Developer
Email
lweichselbaum@google.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
Support
For help with questions, suggestions, or problems, visit the developer's support site