APPLICATION SECURITY (OWASP)
Content Security Policy Generator
Visual builder for Content Security Policy (CSP) headers to prevent XSS attacks with instant config output for Nginx, Apache, and HTML.
Complete Privacy: All policies are calculated entirely in your browser without any telemetry or server requests.
Preset Configurations:
default-src
Fallback directive for resource types
script-src
Executable JavaScript sources
style-src
Stylesheets and inline CSS
img-src
Images, SVGs, and favicons
font-src
Font files (WOFF, WOFF2, TTF)
connect-src
Fetch, XHR endpoints, WebSockets
frame-ancestors & form-action
Clickjacking protection and form targets
Looking for an Enterprise Cyber Security Audit?
At GorbaTech we perform thorough vulnerability assessments, penetration testing, and security hardening for enterprise web infrastructures.
Schedule a 15-min Security Brief