Security
CSP Generator
Build a Content-Security-Policy header.
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'
Runs in your browser. Free — nothing sensitive leaves the page.
About this tool
Free csp generator tool. Build a Content-Security-Policy header. No signup, nothing uploaded.
Frequently asked questions
Is this safe to use?
Yes. Generation and hashing happen locally in your browser.
Do you store anything?
No. Nothing you enter is transmitted or stored.
Should I trust this for production?
Use it to generate or verify, but follow your own security policy.
Need more than a tool?
HostingSwift runs the servers too — VPS, web hosting, email, DNS and streaming, with a free tier to start.