# CSP Evaluator

> CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks. This is a Firefox port of the Chrome extension

Canonical page: [https://chrome-stats.com/d/csp-evaluator](https://chrome-stats.com/d/csp-evaluator)

## Overview

- **ID:** `csp-evaluator`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Hacks and Hops
- **Category:** web-development,privacy-security
- **Daily users:** 370
- **Weekly downloads:** 8
- **Rating:** 4.00 / 5 (1 ratings)
- **Version:** 0.3.3
- **Last updated:** 2024-12-19
- **First published:** 2024-12-18
- **Size:** 304 KB
- **Data as of:** 2026-09-08
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/csp-evaluator/)
- **Website:** [https://github.com/ACK-J/CSP-Evaluator-Firefox](https://github.com/ACK-J/CSP-Evaluator-Firefox)

## Description

CSP Evaluator is a Firefox extension ported from the popular Chrome extension that assists developers in assessing Content Security Policy effectiveness against Cross-Site Scripting (XSS) attacks. Built upon the core CSP Evaluator library originally created by Lukas Weichselbaum, this tool enables quick and simple evaluation of CSP configurations to enhance web security. The extension is fully open-source with code available on GitHub, encouraging contributions and issue reporting via the repository. CSP Evaluator is an essential utility for web developers aiming to safeguard their sites by validating CSP implementations efficiently.

## Rankings

- #5,968 — Overall
- #8 — value
- #76 — policy

## Permissions and access

### Permissions

- `storage`
- `webRequest`

### Host permissions

- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Low risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [CSP Evaluator ext](https://chrome-stats.com/d/csp-evaluator-ext) — 2 users
- [CSP Checker](https://chrome-stats.com/d/csp-checker) — 17 users
- [CSPTool](https://chrome-stats.com/d/csptool) — 1 users
- [Content Security Policy (CSP) Generator](https://chrome-stats.com/d/csp-generator) — 582 users, 4.00 / 5
- [CSP Evaluator Content](https://chrome-stats.com/d/csp-evaluator-content) — 1 users
- [CSP Tester](https://chrome-stats.com/d/csp-tester) — 74 users
- [CSP Content Security Policy Generator](https://chrome-stats.com/d/content-security-policy-gen) — 253 users, 3.40 / 5
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 33 users, 5.00 / 5
- [Script Sentinel - CSP Generator](https://chrome-stats.com/d/script-sentinel-csp-generator)
- [CORS Everywhere](https://chrome-stats.com/d/cors-everywhere) — 20,823 users, 4.13 / 5
- [Quick CSP - Whitelist Generator](https://chrome-stats.com/d/quick-csp-whitelist-generator) — 1 users
- [CSP Unblock](https://chrome-stats.com/d/csp-unblock) — 97 users, 3.50 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/csp-evaluator)