Content Security Policy (CSP) Generator
开发者工具 / Developer Tools
Automatically generate content security policy headers online for any website.
用户数
10K
评分
4.6
评论数
14
7 天增长
-10K|-50%
降温信号未识别高风险权限组合
CSP Evaluator
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
用户数20K当前公开安装规模
评分3.1商店平均评分
评论数34公开评论体量
Manifest 版本V3插件平台版本
7日增长-10K近 7 天净增用户
7日增长率-33.3%相对周增长速度
视觉预览
2 项素材CSP Evaluator 媒体预览
趋势
用户增长趋势
按已采集快照查看用户数变化。
用户增长趋势
评分趋势
近 7 日评分趋势
展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。
7 日评分变化
起始值
3.09
最新值
3.09
7 日评分变化
0.00
2026年7月13日2026年7月19日
增长概览
日/周/月增长表现
同口径展示 1 天、7 天、30 天的绝对增长与增长率。
1日增长减少
-10K-33.3%7日增长减少
-10K-33.3%30日增长减少
-10K-33.3%技术摘要
版本、语言与抓取信息
查看发布时间、版本、支持语言、最近更新和抓取时间。
版本0.3.3
ManifestV3
大小296KiB
语言数1English
发布时间
最近更新
最近抓取
English
简介
插件简介
查看插件说明、主要功能和适用场景。
CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses.
CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.
评价
最新评论快照
查看最近评论和评分分布。
商店综合星级3.1Chrome 商店给出的聚合评分，包含只有打分但没有同步评论正文的情况
已同步评论均分2.7仅基于下方已同步评论正文计算
有内容评论26已同步的评论正文数量
总评分/评论数34Chrome 商店公开评分/评论计数
商店综合星级：3.1。下方星级分布只统计已同步评论正文；如果某个插件只有公开分数、没有真实评论正文，这里可能为空。
相关推荐
同类与相关插件
查看 Chrome 商店详情页中的相关产品。
axe DevTools - Web Accessibility Testing
无障碍 / Accessibility
免费增值置信度 64
Accessibility Checker for Developers, Testers, and Designers in Chrome
用户数
400K
评分
3.9
评论数
126
7 天增长
0|0%
Security-Header-Extension
开发者工具 / Developer Tools
A Chrome Extension built to check the presence of embedded security headers.
用户数
4K
评分
4.9
评论数
7
7 天增长
0|0%
Requestly: Intercept & Modify HTTP Requests
开发者工具 / Developer Tools
Intercept & modify HTTP(S) traffic: redirect URLs, modify headers, inject scripts, mock REST & GraphQL APIs, and more.
用户数
300K
评分
4.5
评论数
1,747
7 天增长
0|0%
OWASP Penetration Testing Kit
开发者工具 / Developer Tools
OWASP Penetration Testing Kit
用户数
20K
评分
4.8
评论数
27
7 天增长
0|0%
Disable Content-Security-Policy
开发者工具 / Developer Tools
Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.
用户数
60K
评分
3.5
评论数
102
7 天增长
0|0%
I have a CSP but this doesn't detect it. So disappointed.
It doesn't detect meta CSP and it doesn't say anything about it on the description
For some unknown reason, when the extension was enabled, my browser sent additional requests to the sites. As a result, I lost a lot of hours debugging my site and trying to find the cause of the duplicate requests. As soon as I turned off the extension, the problem disappeared.
Macht wenig überraschend exakt das was dran steht. Keine Ahnung was an anderer Stelle schief gegangen ist, aber es funktioniert sogar in Edge.
Keeps crashing in Chrome 104
used it sometime ago and it was working just fine, with current version of chrome is not working anymore, it keeps crashing Version 104.0.5112.101
No CSP detected on any webpage.
liked it. saved me some headaches!!! was playing around for weeks to get my csp right! there's one drawback though. after copying it all to my policy file it bricked my wordpress login page. so i had to revert back using ftp access to my server to find the problem..... again.
No CSP detected on any webpage.
It doesn't detect meta CSPs which should have been stated in the extension details.