CSP Builder

A Content Security Policy (CSP) is an HTTP header that tells the browser which sources may load scripts, styles, images and frames — the main defence against cross-site scripting (XSS). Toggle the directives here to assemble a header and catch unsafe choices before deploying.