Content Security Policy (CSP) Generator
Developer Tools
Automatically generate content security policy headers online for any website.
Users
10K
Rating
4.6
Reviews
14
7D Growth
-10K|-50%
Cooling signalUnknownHigh-risk permissions
CSP Evaluator
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
Users20KCurrent public install base
Rating3.1Store average score
Reviews34Public review volume
Manifest versionV3Extension platform version
7-day growth-10KNet users gained this week
7-day growth rate-33.3%Relative weekly velocity
Preview
2 assetsCSP Evaluator Media preview
Trend
User growth trend
Review user movement across collected snapshots.
User Growth Over Time
Rating trend
7-day rating trend
View collected rating snapshots from the latest 7-day window to assess rating stability.
7-day rating change
Start
3.09
Latest
3.09
7-day rating change
0.00
2026年7月13日2026年7月19日
Growth overview
Daily, weekly, and monthly growth
Compare 1-day, 7-day, and 30-day net growth and growth rate.
1-day growthDeclining
-10K-33.3%7-day growthDeclining
-10K-33.3%30-day growthDeclining
-10K-33.3%Technical snapshot
Version, languages, and crawl freshness
Review publication date, version, supported languages, and crawl timestamps.
Version0.3.3
ManifestV3
Size296KiB
Languages1English
Published
Store updated
Last crawled
English
Overview
Product summary
Review the store description, core capabilities, and common use cases.
CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses.
CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.
Reviews
Recent review snapshot
Inspect the latest comments and rating distribution.
Store average score3.1Chrome Web Store aggregate rating, including ratings without synced review text
Synced text average2.7Average computed only from synced review bodies below
Reviews with text26Synced review bodies
Total ratings / reviews34Chrome Web Store public rating/review count
Store average score: 3.1. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.
Related products
Similar and related extensions
Review related products from the Chrome Web Store detail page.
axe DevTools - Web Accessibility Testing
Accessibility
FreemiumConfidence 64
Accessibility Checker for Developers, Testers, and Designers in Chrome
Users
400K
Rating
3.9
Reviews
126
7D Growth
0|0%
Security-Header-Extension
Developer Tools
A Chrome Extension built to check the presence of embedded security headers.
Users
4K
Rating
4.9
Reviews
7
7D Growth
0|0%
Requestly: Intercept & Modify HTTP Requests
Developer Tools
Intercept & modify HTTP(S) traffic: redirect URLs, modify headers, inject scripts, mock REST & GraphQL APIs, and more.
Users
300K
Rating
4.5
Reviews
1,747
7D Growth
0|0%
OWASP Penetration Testing Kit
Developer Tools
OWASP Penetration Testing Kit
Users
20K
Rating
4.8
Reviews
27
7D Growth
0|0%
Disable Content-Security-Policy
Developer Tools
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
Users
60K
Rating
3.5
Reviews
102
7D Growth
0|0%
I have a CSP but this doesn't detect it. So disappointed.
It doesn't detect meta CSP and it doesn't say anything about it on the description
For some unknown reason, when the extension was enabled, my browser sent additional requests to the sites. As a result, I lost a lot of hours debugging my site and trying to find the cause of the duplicate requests. As soon as I turned off the extension, the problem disappeared.
Macht wenig überraschend exakt das was dran steht. Keine Ahnung was an anderer Stelle schief gegangen ist, aber es funktioniert sogar in Edge.
Keeps crashing in Chrome 104
used it sometime ago and it was working just fine, with current version of chrome is not working anymore, it keeps crashing Version 104.0.5112.101
No CSP detected on any webpage.
liked it. saved me some headaches!!! was playing around for weeks to get my csp right! there's one drawback though. after copying it all to my policy file it bricked my wordpress login page. so i had to revert back using ftp access to my server to find the problem..... again.
No CSP detected on any webpage.
It doesn't detect meta CSPs which should have been stated in the extension details.