# CSP Unblock

> No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

Canonical page: [https://chrome-stats.com/d/csp-unblock](https://chrome-stats.com/d/csp-unblock)

## Overview

- **ID:** `csp-unblock`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Balvin
- **Category:** web-development,privacy-security,tabs
- **Daily users:** 97
- **Weekly downloads:** 11
- **Rating:** 3.50 / 5 (2 ratings)
- **Version:** 0.1.4
- **Last updated:** 2026-01-08
- **First published:** 2026-01-05
- **Size:** 124 KB
- **Data as of:** 2026-09-08
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/csp-unblock/)
- **Website:** [https://webextension.org/listing/csp-unblock.html](https://webextension.org/listing/csp-unblock.html)

## Description

This extension removes the following CSP-related response headers to remove limitations caused by CSP.
<ol><li>"content-security-policy" header</li><li>"content-security-policy-report-only" header</li><li>"x-webkit-csp" and "x-webkit-csp-report-only" headers</li><li>"x-content-security-policy" and "x-content-security-policy-report-only" headers</li><li>reporting APIs ("report-to" and "reporting-endpoints")</li></ol>
Use Cases:
1. This extension can temporarily remove the limitations of CSP so that the developer can test inline and remote scripts. Also, you can load different cross-origin resources without any limitation.
2. Allow a website to load a remote worker script
3. Allow a website to play remote media

Notes:
1. Disable the extension when you are browsing the internet. By removing CSP, the website's protection reduces significantly which might harm you.
2. The extension removes specified CSP-related headers from the top-frame and all sub-frame elements

Definitions:
"content-security-policy" header: The HTTP Content-Security-Policy response header allows website administrators to control resources the user agent is allowed to load for a given page. With a few exceptions, policies mostly involve specifying server origins and script endpoints. This helps guard against cross-site scripting attacks (Cross-site_scripting).

"content-security-policy-report-only" header: The HTTP Content-Security-Policy-Report-Only response header allows web developers to experiment with policies by monitoring (but not enforcing) their effects. These violation reports consist of JSON documents sent via an HTTP POST request to the specified URI.

## Rankings

- #11,758 — Overall
- #21 — unblock
- #50 — policy
- #60 — relate
- #163 — block ads
- #199 — limit

## Permissions and access

### Permissions

- `storage`
- `declarativeNetRequest`
- `contextMenus`

### Host permissions

- `*://*/*`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [CSP Bypass For Testing](https://chrome-stats.com/d/csp-bypass-for-testing) — 28 users
- [CSPTool](https://chrome-stats.com/d/csptool) — 1 users
- [CSPBlocker](https://chrome-stats.com/d/cspblocker) — 27 users, 4.00 / 5
- [Disable CSP for a minute](https://chrome-stats.com/d/disable-csp-for-a-minute) — 874 users, 3.57 / 5
- [CSP Tester](https://chrome-stats.com/d/csp-tester) — 74 users
- [CSP Content Security Policy Generator](https://chrome-stats.com/d/content-security-policy-gen) — 253 users, 3.40 / 5
- [Content Security Policy (CSP) Generator](https://chrome-stats.com/d/csp-generator) — 582 users, 4.00 / 5
- [CSP Checker](https://chrome-stats.com/d/csp-checker) — 17 users
- [CSP Evaluator ext](https://chrome-stats.com/d/csp-evaluator-ext) — 2 users
- [Quick CSP - Whitelist Generator](https://chrome-stats.com/d/quick-csp-whitelist-generator) — 1 users
- [security.csp.enable:false](https://chrome-stats.com/d/security-csp-enable-false) — 1 users
- [CSP Evaluator](https://chrome-stats.com/d/csp-evaluator) — 370 users, 4.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/csp-unblock)