# CSP Content Security Policy Generator

> Best Content-Security-Policy generator to automatically create Strict CSP policies (with SHA support) for any website.

Canonical page: [https://chrome-stats.com/d/content-security-policy-gen](https://chrome-stats.com/d/content-security-policy-gen)

## Overview

- **ID:** `content-security-policy-gen`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** RapidSec
- **Category:** web-development
- **Daily users:** 253
- **Weekly downloads:** 1
- **Rating:** 3.40 / 5 (5 ratings)
- **Version:** 1.9.0
- **Last updated:** 2022-01-28
- **First published:** 2021-12-14
- **Size:** 430 KB
- **Data as of:** 2026-09-08
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/content-security-policy-gen/)
- **Website:** [https://rapidsec.com/contact-us](https://rapidsec.com/contact-us)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/content-security-policy-gen/privacy/](https://addons.mozilla.org/firefox/addon/content-security-policy-gen/privacy/)

## Description

The **CSP Content Security Policy Generator** Chrome extension helps developers, IT teams, and security experts create strict Content Security Policies (CSP) for any public or internal website. By automating the generation of policies that include SHA support, it effectively mitigates client-side attacks such as Cross-Site Scripting (XSS), Clickjacking, Formjacking, and Data Exfiltration.

Built using years of best practices combined with advanced CSP techniques, this extension aligns closely with the logic used by RapidSec's CSP generator. Users are encouraged to deploy policies in report-only mode initially and utilize proper reporting endpoints via services like RapidSec.com. This free tool is an essential asset for enhancing web security and simplifying CSP implementation on your sites.

## Rankings

- #7,264 — Overall
- #5 — policy
- #20 — security
- #32 — generator
- #49 — secure
- #50 — generative

## Permissions and access

### Permissions

- `webRequest`
- `webRequestBlocking`
- `storage`
- `alarms`
- `tabs`
- `activeTab`
- `http://*/`
- `https://*/`

### Content script matches

- `*`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Low risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Content Security Policy (CSP) Generator](https://chrome-stats.com/d/csp-generator) — 582 users, 4.00 / 5
- [CSPTool](https://chrome-stats.com/d/csptool) — 1 users
- [Quick CSP - Whitelist Generator](https://chrome-stats.com/d/quick-csp-whitelist-generator) — 1 users
- [CSP Evaluator ext](https://chrome-stats.com/d/csp-evaluator-ext) — 2 users
- [CSP Tester](https://chrome-stats.com/d/csp-tester) — 74 users
- [Script Sentinel - CSP Generator](https://chrome-stats.com/d/script-sentinel-csp-generator)
- [CSP Evaluator](https://chrome-stats.com/d/csp-evaluator) — 370 users, 4.00 / 5
- [CSP Checker](https://chrome-stats.com/d/csp-checker) — 17 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 33 users, 5.00 / 5
- [Laboratory (Content Security Policy / CSP Toolkit)](https://chrome-stats.com/d/laboratory-by-mozilla) — 1,625 users, 4.56 / 5
- [CSP Evaluator Content](https://chrome-stats.com/d/csp-evaluator-content) — 1 users
- [CSP Unblock](https://chrome-stats.com/d/csp-unblock) — 97 users, 3.50 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/content-security-policy-gen)