Content Security Policy (CSP) Generator Content Security Policy (CSP) Generator Content Security Policy (CSP) Generator Dashboard Data Configuration No policy generated yet.Please go to the Data Configuration tab to configure your directives. Below are your generated CSP outputs. You can use the Raw Header in your server configuration (Nginx, Apache) or the Meta Tag in your HTML <head>. Raw CSP Header Copy HTML Meta Tag Copy Download PDF Report Configure the allowed sources for each content type. Custom domains should be space-separated (e.g., https://api.example.com https://cdn.example.com). default-src Fallback for other directives 'self' 'none' https: script-src JavaScript sources 'self' 'unsafe-inline' 'unsafe-eval' Google Analytics Google APIs style-src CSS sources 'self' 'unsafe-inline' Google Fonts img-src Image sources 'self' data: (Base64) https: (Any HTTPS) connect-src XHR, WebSockets, Fetch 'self' font-src Font sources 'self' Google Fonts Data data: frame-src iFrame sources 'self' 'none' object-src Plugins (Flash, Java, etc.) 'none' 'self' Cancel Generate Policy
