g3n-data
Support繁中
← All tools

Csp Policy Auditor

Parse one CSP policy with first-directive-wins behavior and report risky source patterns, fallback gaps and missing document controls. This is a bounded heuristic review, not complete CSP evaluation or a safety verdict; nonce/hash/strict-dynamic, multiple policies, report-only and browser versions need separate assessment. 32 KiB / 100 directives / 100 sources each.

csp-policy-auditorLOCAL WORKSPACE

Enabling local controls…

Inputs and settings

Processed in this tab without uploading or storing inputs. Each text field is limited to 32 KiB and complete output to 1 MiB; additional format and model limits apply.

Results

Review the settings and run. Editing inputs clears old results.

Processing model and limits

Parse one CSP policy with first-directive-wins behavior and report risky source patterns, fallback gaps and missing document controls. This is a bounded heuristic review, not complete CSP evaluation or a safety verdict; nonce/hash/strict-dynamic, multiple policies, report-only and browser versions need separate assessment. 32 KiB / 100 directives / 100 sources each.

Data and model checked: W3C Content Security Policy ↗Source tool controls ↗

How to use this tool

Load the example, confirm field units and processing rules, then run locally. Editing any input clears the old result. Copy or download the complete output explicitly.

When not to use it

Parse one CSP policy with first-directive-wins behavior and report risky source patterns, fallback gaps and missing document controls. This is a bounded heuristic review, not complete CSP evaluation or a safety verdict; nonce/hash/strict-dynamic, multiple policies, report-only and browser versions need separate assessment. 32 KiB / 100 directives / 100 sources each.