Validate CSP in headers and meta elements

Validate CSP policies as served from the given URL.

Validate/Manipulate CSP Strings

Validate and merge using intersect or union strategy.

View Raw Policy

Send your feedback!

CSP Validator was built by Sergey Shekyan, Michael Ficarra, Lewis Ellis, Ben Vinegar, and the fine folks at Shape Security.

Powered by Salvation v.2.6.0, a Java library for working with CSP policies.