CSP Header Parser Documentation

Break a Content-Security-Policy header into its individual directives and sources for review.

SiteIndex splits a pasted Content-Security-Policy value on semicolons, then lists each directive with its allowed sources in an easy-to-scan table.

• Review a CSP header before deploying a security policy change.
• Spot an overly permissive or missing directive at a glance.
• Document the current CSP rules for a page or application.

Input

Text, files, or values entered in the browser, depending on the tool.

Output

A result shown in the browser that can be reviewed or copied where supported.

• Splitting directives does not validate source expressions, simulate enforcement, or certify a policy as secure.
• Duplicate directives and browser-specific enforcement require separate inspection.

Inputs for this browser-side tool are processed locally and are not sent to SiteIndex. Normal page analytics may still be collected as described in the Privacy Policy. Read the Privacy Policy.