CSP (Content-Security-Policy) Builder
Mitigate XSS and data injection attacks by building strict, modern CSP headers. Includes granular directive controls, preset templates, and hash generators.
RazeQA Synergy: When journey tests detect blocked inline scripts or insecure endpoints, fine-tune your CSP directives here.
Run Automated Journey TestDirective Policies
HTTP Header Output
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://api.example.com https://vitals.vercel-insights.com; img-src 'self' data: https://images.unsplash.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'none'; upgrade-insecure-requests
HTML Meta Tag Alternative
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://api.example.com https://vitals.vercel-insights.com; img-src 'self' data: https://images.unsplash.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'none'; upgrade-insecure-requests">