CSP Evaluator

Parses and validates a Content Security Policy header string, identifies unsafe directives (unsafe-inline, unsafe-eval, wildcards), and suggests hardened replacements following the CSP Level 3 spec.

• →Paste your full CSP header value (without the header name) into the input field.
• →Review the directive-by-directive analysis — red items indicate unsafe or overly broad rules.
• →Click any flagged directive to see an explanation and a suggested safer alternative.
• →Use the builder panel to construct a new CSP from scratch with only the directives you need.