Security headers
CSP, CORS, permissions and referrer policy, and SRI hashes.
8 tools · nothing uploaded
/
- PopularCORS Header GeneratorBuild CORS headers, with the wildcard-plus-credentials trap caught.
- PopularCSP GeneratorBuild a Content-Security-Policy, with the weak settings called out.
- PopularCSP ValidatorCheck a CSP for duplicates, typos and directives that undo it.
- Permissions Policy GeneratorSwitch off the browser features your site does not use.
- Referrer Policy GeneratorChoose a Referrer-Policy and see exactly what each one leaks.
- PopularSecurity Headers GeneratorGenerate the security headers for nginx, Apache or Express.
- PopularSRI Hash GeneratorGenerate a Subresource Integrity hash and the tag to use it.
- Subresource Integrity GeneratorPin a CDN file to its exact contents with an integrity hash.