Loading content...
Compose a clear Content-Security-Policy header with sensible defaults, then copy or download it for testing.
Enter space-separated sources. Start with a restrictive policy and add only what your site needs.
100 characters
Content-Security-Policy
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:Test changes with Content-Security-Policy-Report-Only before enforcing them in production.
Discover more utility-driven tools designed to enhance your workflow and technical excellence.
Generate .gitignore files from 30+ templates — Node, Python, Go, Rust, Java, macOS, Windows, IDEs, and more. Copy or download instantly.
Generate production-ready Dockerfiles and .dockerignore for Node, Python, Go, Rust, Java, and Next.js — multi-stage, distroless-aware.
Searchable reference for every HTTP status code — 1xx to 5xx — with meanings, typical use cases, and developer-friendly explanations.