🔐 Security Kit — CSP Builder Demo

• Directive generator — covers all standard CSP directives (default-src, script-src, style-src, etc.)
• Preset policies — strict, moderate, and permissive presets for quick starts
• Policy tester — validate a URL's existing CSP headers and identify gaps
• Violation reporting — configure report-uri and report-to directives
• Nonce generation — create cryptographic nonces for inline scripts and styles
• Multiple output formats — HTTP header string or HTML `<meta>` tag

# Generate a strict CSP header
python src/csp_builder.py --preset strict

# Build from a config file
python src/csp_builder.py --config examples/csp_config.json --output csp_header.txt

# Test a live URL's CSP
python src/csp_builder.py --test --url https://example.com

{
    "directives": {
        "default-src": ["'none'"],
        "script-src": ["'self'", "https://cdn.example.com"],
        "style-src": ["'self'", "'unsafe-inline'"],
        "img-src": ["'self'", "data:"],
        "connect-src": ["'self'", "https://api.example.com"],
        "font-src": ["'self'"],
        "frame-ancestors": ["'none'"]
    },
    "report_uri": "https://report.example.com/csp"
}