🛡️ CSP Builder

$4.99

Build a strict Content Security Policy from a declarative config file. Handles nonce generation, hash-based source allowlisting, and report-uri setup. Ships with ready-to-use middleware for Flask, FastAPI, and bare WSGI.

• Declarative YAML/JSON config → valid CSP header string
• Per-request nonce generation with automatic template injection
• Hash-based allowlisting for inline scripts and styles
• report-uri and report-to endpoint configuration
• Flask, FastAPI, and WSGI middleware included
• Report-only mode for testing before enforcing
• CSP validator: parse and explain any existing header

# Generate a CSP header from config
python csp.py build --config csp.yaml

# Validate an existing CSP header
python csp.py validate --header "default-src 'self'; script-src 'nonce-abc123'"

# Flask middleware usage
from csp_builder import CSPMiddleware
app.wsgi_app = CSPMiddleware(app.wsgi_app, config='csp.yaml')

Related tools