How to use this tool
- Paste input in the format shown in the example.
- Set the options and run the analysis.
- Review the output and any limitations before using the results.
Try this example
default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'
Accuracy and scope
Heuristic inspection, not a full CSP implementation or security certification. Nonces, hashes, multiple policies and deployment context can change effective behavior.
Is my data uploaded?
This tool runs locally in your browser. Input and output are not sent to a processing server. Copy or download your result before leaving the page.