Content Security Policy (CSP) Header Auditor
Audits HTTP Content-Security-Policy header directives for robust XSS and injection defense.
Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.
How it works
Standard: W3C Content Security Policy Level 3
Formula: Check presence of default-src 'self' and restriction of unsafe-inline/unsafe-eval
Checks: CSP policy string verification
Calculated locally in browser memory; nothing leaves your browser.
Deterministic local-first client-side execution. Provided as-is without warranty.