Item logo image for Disable Content Security Policy

Disable Content Security Policy

Featured
3.7(

7 ratings

)
ExtensionDeveloper Tools3,000 users
Item media 1 (screenshot) for Disable Content Security Policy
Item media 2 (screenshot) for Disable Content Security Policy

Overview

A extension that set csp value empty

A extension that helps you disable or bypass Content Security Policy(CSP). You should know that if you enable it,you are under the risk being attacked by XSS. Click the cola icon.When it turns red,it's working.When it turns gray,it's not. If it doesn't work,try to refresh the page or contact me. https://github.com/WithoutHair/Disable-Content-Security-Policy#disable-content-security-policy 一个帮助你禁用CSP的扩展。 你应该知道禁用后你就处于XSS攻击的风险下了。 点击可乐icon，红色代表CSP被禁用，灰色代表CSP正在生效。 如果没作用，刷新页面试试。

3.7 out of 57 ratings

Learn more about results and reviews.

Details

  • Version
    1.0.0
  • Updated
    July 2, 2026
  • Offered by
    Mywait
  • Size
    14.05KiB
  • Languages
    English (United States)
  • Developer
    Email
    nowmeiying@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

For help with questions, suggestions, or problems, visit the developer's support site

Related

tweak: mock and modify HTTP requests

4.6

Mock or modify your HTTP requests to test, develop and demo your web application

CORS Unblocker

3.0

Temporarily bypass CORS restrictions to streamline development and testing workflows.

Cross Domain - CORS

3.8

Cross Domain will help you to deal with cross domain - CORS problem. This is tool helpful when face with cross domain issue.

Disable-CSP

3.7

A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy

Allow X-Frame-Options

5.0

Easily remove X-Frame-Options from the response header.

Content Security Policy (CSP) Generator

4.6

Automatically generate content security policy headers online for any website.

Anti-CORS, anti-CSP

4.1

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

Requestly: Intercept & Modify HTTP Requests

4.5

Intercept & modify HTTP(S) traffic: redirect URLs, modify headers, inject scripts, mock REST & GraphQL APIs, and more.

Lyra

5.0

Lyra is a XSS automater and broken link checker.

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

Disable Content-Security-Policy

3.5

Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.

Disable Content Security Policy (CSP)

0.0

Disables the Content Security Policy (CSP) on web pages.

tweak: mock and modify HTTP requests

4.6

Mock or modify your HTTP requests to test, develop and demo your web application

CORS Unblocker

3.0

Temporarily bypass CORS restrictions to streamline development and testing workflows.

Cross Domain - CORS

3.8

Cross Domain will help you to deal with cross domain - CORS problem. This is tool helpful when face with cross domain issue.

Disable-CSP

3.7

A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy

Allow X-Frame-Options

5.0

Easily remove X-Frame-Options from the response header.

Content Security Policy (CSP) Generator

4.6

Automatically generate content security policy headers online for any website.

Anti-CORS, anti-CSP

4.1

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

Requestly: Intercept & Modify HTTP Requests

4.5

Intercept & modify HTTP(S) traffic: redirect URLs, modify headers, inject scripts, mock REST & GraphQL APIs, and more.

Google apps