CSP Evaluator CSP Evaluator

Developer Tools
Version: 0.2.1
Last Update: 2020-11-19

Overview

CSP Evaluator is a Chrome extension developed by Lukas Weichselbaum. According to the data from Chrome web store, current version of CSP Evaluator is 0.2.1, updated on 2020-11-19.
10,000+ users have installed this extension. 27 users have rated this extension with an average rating of .

CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.

CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses.
CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.

Rating

27 ratings

Total Installs

10,000+

Information

Last Update

2020-11-19

Current Version

0.2.1

Size

302KiB

Author

Lukas Weichselbaum

Website

None

Category

Developer Tools

Latest Reviews

See More

avatar Nordine Zetoutou
2021-12-09

No CSP detected on any webpage.

avatar Dave Dörenberg-Veltman
2021-03-13

liked it. saved me some headaches!!! was playing around for weeks to get my csp right!
there's one drawback though. after copying it all to my policy file it bricked my wordpress login page.
so i had to revert back using ftp access to my server to find the problem..... again.

avatar Alexander Dobernig
2020-11-21

No CSP detected on any webpage.

avatar Leigh Garner Silverstein
2020-08-24

It doesn't detect meta CSPs which should have been stated in the extension details.

avatar Escape Velocity
2019-11-07

cool.
May be better if it's possible to add/remove CSP directives so I can test without deploying codes lol