What does a CSP validator do?
It checks Content Security Policy directives for syntax errors and insecure configurations.
Developer
CSP Validator
Validate Content Security Policy rules and identify configuration errors.
Tool
CSP Validator
Validate Content Security Policy rules and identify configuration errors.
This tool runs in your browser. Your input is processed locally and is not uploaded.
About this Tool
Use this free CSP validator to analyze Content Security Policy rules, detect syntax issues and review potentially unsafe directives before deployment.
Examples
- default-src 'self'
- script-src 'unsafe-inline' *
- default-src 'self'; img-src https:
Frequently Asked Questions
Can unsafe directives be detected?
Yes. Common issues such as wildcard sources and unsafe-inline directives can be highlighted.
Should CSP be tested before deployment?
Yes. Validating CSP rules helps prevent broken websites and security weaknesses.