Back to Free Tools
FREE TOOLS
Content Security Policy Builder
Build a CSP header from an explicit JSON map of supported directives and source expressions.
CSP directive map
csp-policy-builder.json (complete report and generated source where applicable)
Browser only
Runs locally in your browser. Your files, pasted content and generated output are not uploaded. Reset clears this tool’s working data.
This tool needs JavaScript. If it does not load, refresh the page and try again.
How to use this tool
- Enter values using the displayed examples; observe the documented input shape and limits.
- Choose Calculate result. Review the complete JSON report and any generated source text it contains.
- Download result to save the complete report; copy generated source into your project when relevant. Reset restores examples and clears output.
Examples
CSP directive map: {"default-src":["'self'"],"img-src":["'self'","https://images.example.com"]}
Limitations
- Bounded allowlisted directives and source grammar; no nonce generation, live page analysis or security guarantee. Sandbox and reporting directives are outside this builder.
- Maximum 100,000 UTF-16 units per field, 400,000 UTF-8 combined input bytes, 4 MiB output and 30 seconds in a local worker. Tool-specific bounds may be tighter.
- Generated source is contained in the JSON download and is never executed. Local inspection does not verify remote systems or establish standards certification.
Related tools
No items found.