View and test Content Security Policy headers on any website. Decode existing CSPs or inject your own for testing.
Review user movement over the last 30 days.
Track rating movement over time to see whether quality signals remain stable.
Compare 1-day, 7-day, and 30-day net growth and growth rate.
Review publication date, version, supported languages, and crawl timestamps.
Review the store description, core capabilities, and common use cases.
IntegSec CSP Tester - View and Test Content Security Policies
Transform your browser into a powerful Content Security Policy (CSP) analysis and testing tool. IntegSec CSP Tester is the ultimate extension for web developers, security professionals, and site administrators who need to understand, analyze, and test CSP headers on any website.
🔒 WHAT IS CONTENT SECURITY POLICY?
Content Security Policy (CSP) is a critical web security standard that helps prevent cross-site scripting (XSS) attacks, data injection attacks, and other code injection vulnerabilities. CSP works by allowing website owners to specify which sources the browser should consider valid for loading resources like scripts, stylesheets, images, fonts, and more.
Without proper CSP configuration, websites are vulnerable to Cross-Site Scripting (XSS) attacks, data injection attacks, clickjacking attempts, unauthorized resource loading, and mixed content vulnerabilities.
🎯 WHY USE INTEGSEC CSP TESTER?
Inspect the latest comments and rating distribution.
Review related products from the Chrome Web Store detail page.
Lightweight security scanner that analyzes websites for common vulnerabilities, trackers, and security misconfigurations
Scanning website for vulnerable js libraries. Icon by studiomx
Author, debug, and roll out Content-Security-Policy headers without redeploying.
Develop Content Security Policies (CSP) for your website
Scan HTTP security headers, identify missing protections like CSP, HSTS, and XSS prevention.
An automatic XSS scanner
This is an excellent tool. Very well thought out.