CSP Header Generator

Generate Content Security Policy headers visually. Configure allowed sources for scripts, styles, images, and more.

upgrade-insecure-requests Upgrade HTTP requests to HTTPS

block-all-mixed-content Block all mixed content (deprecated in some browsers)

Content-Security-Policy Header

Enable directives above to generate the header...

Nginx Snippet

Apache .htaccess Snippet