Is CSP Header Validator free to use?

Yes, CSP Header Validator is completely free. No registration, no account, and no hidden costs — ever.

Is my data safe when using CSP Header Validator?

All processing happens directly in your browser. Your data never leaves your device — nothing is uploaded or stored on our servers.

No. All CheckTown tools work instantly without registration or sign-up.

CSP Header Validator works on any device — desktop, tablet, or phone. The interface adapts to your screen size.

校验 Content-Security-Policy 响应头，检查指令并发现安全风险。

在上方粘贴 CSP 响应头值

我们会校验指令并检查安全风险

Ctrl+Enter 运行Ctrl+Shift+C 复制

了解如何验证内容安全策略响应头，并避免常见的安全配置错误。

什么是 CSP 校验？

内容安全策略（CSP）校验用于检查你的 CSP 响应头或 meta 标签是否正确定义了浏览器允许加载的资源。配置错误的 CSP 要么会拦截合法资源、导致站点损坏，要么过于宽松、留下安全隐患。