WaZappyCSP Generator
Secure your website against XSS, Clickjacking, and Injection attacks by generating a strict Content Security Policy.
Default-Src (Fallback)
Controls directives that aren't explicitly specified.
Script-Src (JavaScript)
Style-Src (CSS)
Img-Src (Images)
Connect-Src (AJAX/Sockets)
🛡️ Generated Policy
Add this to your .htaccess or as a <meta> tag.
Tip: Start with 'Report Only' mode if you are testing on a live production site.
