# Laboratory (Content Security Policy / CSP Toolkit)

> Because good website security shouldn't only be available to mad scientists! Laboratory is a WebExtension that helps you generate a Content Security Policy (CSP) header for your website.

Canonical page: [https://chrome-stats.com/d/laboratory-by-mozilla](https://chrome-stats.com/d/laboratory-by-mozilla)

## Overview

- **ID:** `laboratory-by-mozilla`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** April King
- **Category:** web-development,privacy-security,other
- **Daily users:** 1,623
- **Weekly downloads:** 10
- **Rating:** 4.56 / 5 (64 ratings)
- **Version:** 3.0.8
- **Last updated:** 2021-01-28
- **First published:** 2017-02-24
- **Size:** 399 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/laboratory-by-mozilla/)
- **Website:** [https://github.com/april/laboratory](https://github.com/april/laboratory)

## Description

Laboratory is a powerful browser extension designed to help web developers generate robust Content Security Policy (CSP) headers effortlessly. By simply recording your browsing session on your website, it automatically produces a secure CSP tailored to your site’s needs. This tool simplifies the complex process of crafting effective security policies, helping protect websites from common vulnerabilities like cross-site scripting attacks.

Whether you're a beginner or an experienced developer, Laboratory equips you with essential security controls to safeguard your web content. To get the most out of Laboratory, explore the detailed video introduction by Securing DevOps that walks you through its features and best practices. Enhance your site's security with Laboratory—because good website security shouldn't be reserved for experts alone.

## Rankings

- #2,477 — Overall
- #275 — Web Development
- #4 — policy
- #14 — security
- #38 — secure
- #136 — concert

## Permissions and access

### Permissions

- `storage`
- `tabs`
- `webNavigation`
- `webRequest`
- `webRequestBlocking`
- `ftp://*/*`
- `http://*/*`
- `https://*/*`
- `ws://*/*`
- `wss://*/*`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Low risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Review summary

### Pros

- Saves time and headache for users dealing with CSP issues.
- Functions well for many users without errors.
- Great concept for enhancing security and privacy in web browsing.

### Cons

- Can cause server errors upon enabling the extension.
- Generates spammy fake CSP reports, which can clutter the network tab.
- Lacks support for local files (file:/// URIs).

## Similar extensions and apps

- [Content Security Policy (CSP) Generator](https://chrome-stats.com/d/csp-generator) — 579 users, 4.00 / 5
- [CSPTool](https://chrome-stats.com/d/csptool) — 1 users
- [CSP Content Security Policy Generator](https://chrome-stats.com/d/content-security-policy-gen) — 252 users, 3.40 / 5
- [CSP Tester](https://chrome-stats.com/d/csp-tester) — 73 users
- [CSP Checker](https://chrome-stats.com/d/csp-checker) — 17 users
- [Script Sentinel - CSP Generator](https://chrome-stats.com/d/script-sentinel-csp-generator)
- [CSP Evaluator](https://chrome-stats.com/d/csp-evaluator) — 369 users, 4.00 / 5
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 33 users, 5.00 / 5
- [CSP Evaluator ext](https://chrome-stats.com/d/csp-evaluator-ext) — 3 users
- [InfraLens - Security & Inspector](https://chrome-stats.com/d/infralens-security-inspector) — 1 users
- [CSP Unblock](https://chrome-stats.com/d/csp-unblock) — 95 users, 3.50 / 5
- [Quick CSP - Whitelist Generator](https://chrome-stats.com/d/quick-csp-whitelist-generator) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/laboratory-by-mozilla)