理 理悟万池
`⌘K`

全部工具

SECURITY · CSP

# CSP 策略生成器

可视化勾选 Content-Security-Policy 各指令及来源，即时生成完整 CSP 头或 meta 标签。

default-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
script-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
style-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
img-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
font-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
connect-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
frame-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
media-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
object-src
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
base-uri
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
form-action
'self''unsafe-inline''unsafe-eval''none''strict-dynamic''unsafe-hashes'data:blob:https:http:
输出格式：

    Content-Security-Policy: default-src 'self'