Developer

CSP Validator

Validate Content Security Policy rules and identify configuration errors.

Tool

Loading tool...

About this Tool

Use this free CSP validator to analyze Content Security Policy rules, detect syntax issues and review potentially unsafe directives before deployment.

Examples

  • default-src 'self'
  • script-src 'unsafe-inline' *
  • default-src 'self'; img-src https:

Frequently Asked Questions

What does a CSP validator do?

It checks Content Security Policy directives for syntax errors and insecure configurations.

Can unsafe directives be detected?

Yes. Common issues such as wildcard sources and unsafe-inline directives can be highlighted.

Should CSP be tested before deployment?

Yes. Validating CSP rules helps prevent broken websites and security weaknesses.

Related Tools