Content Security Policy (CSP) Generator
Developer Tools
Automatically generate content security policy headers online for any website.
Users
10K
Rating
4.6
Reviews
14
7D Growth
-10K|-50%
Cooling signalUnknownHigh-risk permissions
CSP Evaluator
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
Users20KCurrent public install base
Rating3.1Store average score
Reviews34Public review volume
Manifest versionV3Extension platform version
7-day growth-10KNet users gained this week
7-day growth rate-33.3%Relative weekly velocity
Preview
2 assetsCSP Evaluator Media preview
Trend
User growth trend
Review user movement across collected snapshots.
User Growth Over Time
Rating trend
7-day rating trend
View collected rating snapshots from the latest 7-day window to assess rating stability.
7-day rating change
Start
3.09
Latest
3.09
7-day rating change
0.00
2026年7月13日2026年7月19日
Growth overview
Daily, weekly, and monthly growth
Compare 1-day, 7-day, and 30-day net growth and growth rate.
1-day growthDeclining
-10K-33.3%7-day growthDeclining
-10K-33.3%30-day growthDeclining
-10K-33.3%Technical snapshot
Version, languages, and crawl freshness
Review publication date, version, supported languages, and crawl timestamps.
Version0.3.3
ManifestV3
Size296KiB
Languages1English
Published
Store updated
Last crawled
English
Overview
Product summary
Review the store description, core capabilities, and common use cases.
CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses.
CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.
Reviews
Recent review snapshot
Inspect the latest comments and rating distribution.
Store average score3.1Chrome Web Store aggregate rating, including ratings without synced review text
Synced text average2.7Average computed only from synced review bodies below
Reviews with text26Synced review bodies
Total ratings / reviews34Chrome Web Store public rating/review count
Store average score: 3.1. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.
Related products
Similar and related extensions
Review related products from the Chrome Web Store detail page.
axe DevTools - Web Accessibility Testing
Accessibility
FreemiumConfidence 64
Accessibility Checker for Developers, Testers, and Designers in Chrome
Users
400K
Rating
3.9
Reviews
126
7D Growth
0|0%
Security-Header-Extension
Developer Tools
A Chrome Extension built to check the presence of embedded security headers.
Users
4K
Rating
4.9
Reviews
7
7D Growth
0|0%
Requestly: Intercept & Modify HTTP Requests
Developer Tools
Intercept & modify HTTP(S) traffic: redirect URLs, modify headers, inject scripts, mock REST & GraphQL APIs, and more.
Users
300K
Rating
4.5
Reviews
1,747
7D Growth
0|0%
OWASP Penetration Testing Kit
Developer Tools
OWASP Penetration Testing Kit
Users
20K
Rating
4.8
Reviews
27
7D Growth
0|0%
Disable Content-Security-Policy
Developer Tools
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
Users
60K
Rating
3.5
Reviews
102
7D Growth
0|0%
cool. May be better if it's possible to add/remove CSP directives so I can test without deploying codes lol
doesn't detect CSP in page meta tags
Спасибо!
Where to post the issues? It shows 'Directive "prefetch-src" is not a known CSP directive.', https://w3c.github.io/webappsec-csp/#directive-prefetch-src
It appears that the extension does not consider CSP in meta tags.
Супер!