CSP Analyzer
Parse a CSP header and flag common weaknesses.
Processed locally in your browser. Nothing you enter is uploaded or stored.
Overview
Parses an existing Content-Security-Policy value directive by directive and flags common weaknesses — like 'unsafe-inline', 'unsafe-eval' or an overly permissive wildcard source.
How to use it
- 1Paste a CSP header value.
- 2Review each directive and any flagged weaknesses.
Tips
- This flags common red flags, not a full security audit — some flagged patterns (like 'unsafe-inline' for style-src) are legitimate tradeoffs depending on your app.