HTTP Headers, CSP & CORS Generator | JsonApi

HTTP / Security Headers

Build a Content Security Policy and review common security risks.

The generated header and warnings are calculated locally and are never deployed automatically.

Processing: Local browser only

Directives

default-srcscript-srcstyle-srcimg-srcconnect-srcfont-srcframe-ancestorsobject-src 'none'upgrade-insecure-requests

Generated header

Validation

Directives

Access-Control-Allow-OriginAccess-Control-Allow-MethodsAccess-Control-Allow-HeadersAccess-Control-Max-AgeAccess-Control-Allow-Credentials: true

Generated header

Directives

Visibilitymax-age (seconds)s-maxage (seconds)no-storeno-cachemust-revalidateimmutable

Generated header

Directives

cameramicrophonegeolocationfullscreenpayment

Generated header