- Free
- No sign-up
- Works on any device
No tool matches your search.
- Free
- No sign-up
- Works on any device
Create a QR code for a link, Wi-Fi, WhatsApp, contact and more, or read one from a photo.
- Free
- No sign-up
- Works on any device
Fill in the details to see your QR code.
PNG for phones, chats and websites. SVG and PDF stay sharp at any size, which is best for printing. Tip: point your phone camera at the preview to test it.
3. Style (optional): colors, dots, logo
Choose a photo or screenshot or drag it here
Works with photos of printed codes, screenshots and image files.
Looking for QR codes…
Content Security Policy generator
Build a Content-Security-Policy header by ticking sources, for HTML, Nginx and Apache.
- Free
- No sign-up
- Works on any device
About Content Security Policy generator
Build a Content-Security-Policy by ticking which sources may load scripts, styles, images, fonts and frames, then copy it as an HTML meta tag or as Nginx or Apache header config. A strict policy limits damage from cross-site scripting, though blocking inline scripts may need nonces or hashes.
How to use Content Security Policy generator
- Tick the sources you allow for scripts, styles, images and other content types.
- Add your own domains where needed.
- Copy the header for HTML, Nginx or Apache.
Why use this tool?
- Private: everything happens in your browser. Nothing you enter is uploaded.
- Free, with no sign-up, no watermark and no limit on how often you use it.
- Works on phones, tablets and computers: Android, iPhone, Windows, Mac and Linux. Nothing to install.
- Free to embed on your own website, with a ready-made code to copy.
- Available in 10 languages.
Also known as
Frequently asked questions
Why does my CSP block inline scripts?
Without unsafe-inline, browsers refuse inline code. Move scripts to files, or allow specific ones with a nonce or hash instead of weakening the whole policy.
How can I test a CSP without breaking my site?
Start with the report-only version of the header. It logs violations in the browser console without blocking anything, so you can fix problems first.
What does the self keyword mean?
It allows resources from your own domain only. Anything from another domain must be listed explicitly.
Is Content Security Policy generator free?
Yes. Content Security Policy generator on Toolipedia is free to use, with no sign-up and no watermark.
Is it safe to use?
Yes. Everything is worked out in your browser, and nothing you enter is sent to our server.
Does it work on my phone?
Yes. It works in any modern browser on Android and iPhone, as well as on tablets and computers. There's nothing to install.
Do I need an account?
No. Just open the page and use the tool. There's no sign-up and no email needed.
Can I put Content Security Policy generator on my own website?
Yes. Use the Embed on your site button under the tool to copy a short piece of code and paste it into your page. It is free, needs no account, and the tool keeps working inside your page.