Cara pakai: Generator Content-Security-Policy

Generator Content-Security-Policy adalah alat Alat web online gratis yang build a CSP header for nginx, Apache or HTML, with warnings about unsafe-inline and unsafe-eval seketika di peramban Anda. Tempel data, atur opsi, dan dapatkan hasil secara langsung — tanpa instalasi, tanpa daftar, tanpa unggah.

Gunakan Generator Content-Security-Policy sekarang →

Deskripsi

Build a CSP header for nginx, Apache or HTML, with warnings about unsafe-inline and unsafe-eval.

  • Alat web
  • Karena semuanya dihitung di sisi klien, Generator Content-Security-Policy aman untuk data sensitif seperti kunci API.
Masukan Generator Content-Security-Policy Keluaran Berjalan 100% di browser — data Anda tidak pernah meninggalkan perangkat.
Generator Content-Security-Policy — Masukan → Keluaran

Cara pakai

Menggunakan Generator Content-Security-Policy butuh tiga langkah:

  1. Tempel data ke kotak input (atau muat contoh).
  2. Sesuaikan opsi dengan format yang diinginkan.
  3. Salin, unduh, atau periksa hasil — diperbarui secara langsung.
Cara pakai · Generator Content-Security-Policy 1 Tempel data ke kotakinput (atau muatcontoh). 2 Sesuaikan opsi denganformat yangdiinginkan. 3 Salin, unduh, atauperiksa hasil —diperbarui secaralangsung.
Cara pakai

Jalankan

Contoh

Fill in the directives; the generator emits nginx, Apache and meta-tag forms plus a Report-Only variant.

Keluaran（由工具此刻实时生成）

Content-Security-Policy

default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests

nginx
  add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests" always;

Apache (.htaccess)
  Header always set Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests"

HTML meta tag
  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests">

Report-only variant (test without breaking the site)
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' data:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests

⚠ Review before deploying
  • No report-uri/report-to set — you will not learn about violations in production.

Always deploy with Report-Only first and watch the console for violations.

此输出由工具真实运行产生，并非人工编写。

Studi kasus

Situasi umum tempat Generator Content-Security-Policy membantu:

  • Build a CSP header for nginx, Apache or HTML, with warnings about unsafe-inline and unsafe-eval.

Parameter

Alat ini tidak punya opsi — bekerja langsung pada masukan.

FAQ

Apa itu Content-Security-Policy Generator?

Content-Security-Policy Generator digunakan untuk build a CSP header for nginx, Apache or HTML, with warnings about unsafe-inline and unsafe-eval. Berjalan sepenuhnya di peramban, data Anda tetap privat.

Apakah Content-Security-Policy Generator gratis?

Ya, tanpa batas, tanpa daftar atau instalasi.

Apakah data saya diunggah?

Tidak. Semua diproses secara lokal di peramban.

Perlu diketahui

  • 全部计算在浏览器端完成，因此超大输入受限于标签页内存，而非服务器上传限制。

Alat terkait

Generator HTML pengalihan TagBuild title, description, OG and Twitter card tags.Generator robots.txtCompose a correct robots.txt with sitemaps and rules.Generator .htaccess Redirect301/302 redirect and HTTPS-force snippets.Generator JSON-LD Structured dataCreate schema.org JSON-LD for articles, products and FAQs.rahasia Address ObfuscatorEncode emails to defeat scrapers.Generator emailRender text or color into a real .ico file locally.

Generator Content-Security-Policy → · Alat web →

Gunakan Generator Content-Security-Policy sekarang →