CSP Evaluator

CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.

CSP Evaluator: XSS Attack Mitigation Tool

The 'CSP Evaluator' is a Chrome extension tailored for developers and security experts to evaluate if a Content Security Policy (CSP) serves as a robust protection against cross-site scripting (XSS) attacks. It automates the review process of CSP policies, spreading awareness about CSP bypasses, and encourages developers to strengthen their CSP.

Download

Extension stats

By: Lukas Weichselbaum

Users: 30,000+

Rating: 3.03

(30)

Version: 0.3.2 (Last updated: 2024-07-13)

Creation date: 2020-04-16

Permissions:

storage
webRequest

Host permissions:

<all_urls>

Size: 304.13K

Email: lw*****@google.com

Full description: See detailed description

Ranking

# 4,678 ▲ 88

Other rankings

#6555 in Developer Tools ▲ 92 #33 in policy keyword 15 #225 in security keyword 69 ▼ 10 #262 in developer tools keyword 59 ▼ 7

Other platforms

Not available on Android

Not available on Firefox

Not available on Edge

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Chrome Web Store does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.

Pros

Works fine after reinstalling for some users
Helpful in troubleshooting CSP configurations
Compatible with Edge browser

Cons

Frequently stops working or crashes
Does not detect meta CSPs or any CSPs on webpages
Causes duplicate requests in the browser

Most mentioned

Extension stops working or crashes
Does not detect meta CSP
No CSP detected on any webpage

User reviews

It works just fine.

Goktug Erol, 2025-01-23

extension stopped working :(

Evan Tirta, 2024-11-14

This extension stopped working for me in the past couple months in the Brave browser. I recently disabled, removed, and reinstalled and it's working again. For those who are having trouble with it working, give the reinstall a try.

Kirk Solar, 2024-11-04

View all user reviews

Extension safety

Risk impact

CSP Evaluator requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk impact analysis details

Critical Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
Critical ****** ****** ** *** ********* ****** * *********** ******** **** ** ** *** ******* *** ****** **** **** *** ******* *****
High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****
Low ******* ****** ** *** ********* ********

Risk likelihood

We don't have sufficient data to confidently determine the risk likelihood of CSP Evaluator. Use it at your own risk.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
Low **** ********* *** ***** **** **** * ****** **** ***** ********** *** **** ****** ** ** ****** *** *****
Good **** ********* *** **** **** *******

Upgrade to see full risk analysis details