Disable Content-Security-Policy

Toggle, inspect, and test Content-Security-Policy on any tab or iframe. View headers, inject a custom CSP, and debug violations.

CSP Disabler is a developer toolkit for testing and debugging Content-Security-Policy on any website. Toggle or strip a page's CSP response headers per tab, inject your own custom policy (as a header, a <meta> tag, or both), and see exactly what the server originally sent before you touch it. The Logs tab captures real CSP violations and console activity as they happen — categorized by directive (scripts, images, frames, connections, inline/eval violations, and more) — plus any Service Workers registered on the page. Export everything as JSON, a HAR-like report, or plain-text logs, or copy a suggested CSP built from what was actually observed being blocked. The Iframe tab brings all of the above to a specific iframe on the page instead of just the top frame — pick one from a dropdown and inspect, toggle, or inject its CSP independently. The Browser Policy tab shows your browser/OS, how the extension itself was installed, and any enterprise policy an administrator has pushed to it — everything an extension is actually allowed to see, since chrome://policy itself is off-limits to extension code. Built for web developers, security testers, and QA. Support development if you enjoy the extension: https://www.paypal.com/ncp/payment/5WYT5ZZF8TR5C