Web Tools

Parse a Content-Security-Policy, explain each directive and flag weaknesses (unsafe-inline, wildcards, missing object-src/base-uri/frame-ancestors…).

CSP Evaluator. Operations: evaluate — Parse a CSP header and return its directives and findings by severity. harden — Add the low-risk directives a policy is missing (object-src 'none', base-uri, frame-ancestors, form-action) and return ready-to-paste header, meta, nginx and Apache forms.

post/api/v1/csp

Request

  • Base URL: https://programmes.net
  • URL: https://programmes.net/api/v1/csp
  • Auth: none declared

Request body

OR

Response

The operation ran.

okunknown required
tool'csp' required
operation'evaluate' | 'harden' required
resultunknown required

Changes

No recorded changes to this operation across all 1 revision of this API.