稳定信号未识别到付费功能中风险权限组合

Disable Content-Security-Policy

Disable Content-Security-Policy for web application testing. When the icon is coloured, CSP headers are disabled.

用户数60K当前公开安装规模

评分3.5商店平均评分

评论数102公开评论体量

Manifest 版本V3插件平台版本

7日增长0近 7 天净增用户

7日增长率0%相对周增长速度

视觉预览

Disable Content-Security-Policy 媒体预览

1 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

3.53

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长持平

00%

7日增长持平

00%

30日增长减少

-10K-14.3%

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本4.0.0

ManifestV3

大小29.02KiB

语言数2English / English (United Kingdom)

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

Use at your own risk. Disables the current page's Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page.

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

CORS Unblock

开发者工具 / Developer Tools

No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled

Ignore X-Frame headers

开发者工具 / Developer Tools

Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.

Anti-CORS, anti-CSP

开发者工具 / Developer Tools

付费置信度 55

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

Content Security Policy (CSP) Generator

开发者工具 / Developer Tools

Automatically generate content security policy headers online for any website.

Disable-CSP

开发者工具 / Developer Tools

A browser extension to disable http header Content-Security-Policy and html meta Content-Security-Policy

Disable Content Security Policy

开发者工具 / Developer Tools

A extension that set csp value empty

AI 产品解读

Disables Content-Security-Policy (CSP) response headers on a per-tab basis via a toolbar icon toggle

Developers testing web applications need to bypass CSP restrictions to inspect what resources third-party tags inject, debug mixed-content issues, or test with external scripts that CSP would normally block

User navigates to a web page → clicks the extension icon in the toolbar → CSP response headers are stripped from all main_frame/sub_frame requests for that tab → icon changes color to indicate CSP is disabled → user reloads the page and can now load previously-blocked resources → clicking again re-enables CSP

目标用户: Web developers / QA testers / Security researchers

Extension is very small (95 lines of JS), making full code review straightforward and deterministic
No remote endpoints or external service integration beyond GitHub homepage link

付费分析

未识别到付费功能

The extension is free and open-source under the Unlicense (unlicense.org). No payment, subscription, billing, or feature-gating code exists anywhere in the source. The 'pro' keyword hits were false positives: one from verified_contents.json (binary/base64 data containing substring 'pro' in a hash), and one from README.md where 'protect' is used in a security context, not a paid tier. The 'license' hit refers to the open-source Unlicense, not a commercial license.

置信度: 100
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: No login, authentication, or account creation is needed. The extension operates entirely locally using Chrome's declarativeNetRequest API to strip CSP response headers. No remote services require user authentication. The 'auth' keyword hit was a false positive from the manifest 'author' field (line 8). The 'session' hits refer to Chrome's updateSessionRules API, not user sessions.

权限风险

中风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：storage、activeTab

发布者

Phil Grayson

独立发布者

邮箱: [email protected]
电话: --
地址: --

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Disable Content-Security-Policy

Disable Content-Security-Policy 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

CORS Unblock

Ignore X-Frame headers

Anti-CORS, anti-CSP

Content Security Policy (CSP) Generator

Disable-CSP

Disable Content Security Policy