CSP Generator

Secure your website against XSS, Clickjacking, and Injection attacks by generating a strict Content Security Policy.

Default-Src (Fallback)

Controls directives that aren't explicitly specified.

Script-Src (JavaScript)

Style-Src (CSS)

Img-Src (Images)

Connect-Src (AJAX/Sockets)

🛡️ Generated Policy

Add this to your .htaccess or as a <meta> tag.

Tip: Start with 'Report Only' mode if you are testing on a live production site.