ES
Security Tool

Content Security Policy (CSP) Generator

Build visual CSP headers for Nginx, Apache, PHP and Meta tags to prevent XSS and data injection attacks.

default-src
script-src (Scripts Javascript)
style-src (Estilos CSS)
img-src (Imágenes)
font-src (Tipografías)

What is Content Security Policy?

CSP is an HTTP header security layer that restricts the resources (scripts, images, stylesheets) that the browser is allowed to load for a given page, stopping Cross-Site Scripting (XSS) attacks.