Features

This chapter covers the core features and capabilities of CSP Builder.

Features

• Directive generator — covers all standard CSP directives (default-src, script-src, style-src, etc.)
• Preset policies — strict, moderate, and permissive presets for quick starts
• Policy tester — validate a URL's existing CSP headers and identify gaps
• Violation reporting — configure report-uri and report-to directives
• Nonce generation — create cryptographic nonces for inline scripts and styles
• Multiple output formats — HTTP header string or HTML tag
• Config file support — version-control your CSP policies as JSON
• Directive reference — built-in documentation for every CSP directive

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get CSP Builder up and running in your environment.

Quick Start

# Generate a strict CSP header
python src/csp_builder.py --preset strict

# Build from a config file
python src/csp_builder.py --config examples/csp_config.json --output csp_header.txt

# Test a live URL's CSP
python src/csp_builder.py --test --url https://example.com

Output

Outputs a ready-to-use CSP header string (e.g., Content-Security-Policy: default-src 'none'; script-src 'self'; ...) or an HTML meta tag equivalent. Test mode shows the existing policy with gap analysis.