CSP Builder

Build a Content Security Policy interactively. Start from a template, adjust directives, see the policy update live, and copy a config snippet for Nginx, Apache, or Cloudflare.

Start from:

Report-only mode (test without blocking — uses Content-Security-Policy-Report-Only header)

Generated policy

Fix it

Where: Add inside your server block — e.g. /etc/nginx/sites-available/yoursite. Reload: sudo nginx -s reload

Where: Add to .htaccess in your site root, or to your VirtualHost config. Requires mod_headers.

Where: Apply via Cloudflare Dashboard. See snippet for navigation path.