# Script Sentinel - CSP Generator > Generate Content Security Policy recommendations for the current tab with Script Sentinel. Canonical page: [https://chrome-stats.com/d/script-sentinel-csp-generator](https://chrome-stats.com/d/script-sentinel-csp-generator) ## Overview - **ID:** `script-sentinel-csp-generator` - **Platform:** Firefox - **Type:** Firefox add-on - **Status:** Available - **Publisher:** dan245 - **Category:** web-development,privacy-security - **Version:** 1.7.2 - **Last updated:** 2026-08-03 - **First published:** 2026-06-18 - **Size:** 92 KB - **Data as of:** 2026-09-08 - **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/script-sentinel-csp-generator/) - **Website:** [https://script-sentinel.com/contact](https://script-sentinel.com/contact) - **Privacy policy:** [https://addons.mozilla.org/firefox/addon/script-sentinel-csp-generator/privacy/](https://addons.mozilla.org/firefox/addon/script-sentinel-csp-generator/privacy/) ## Description Script Sentinel helps developers generate Content Security Policy recommendations directly from the current Firefox tab. When you click Generate CSP, the add-on sends the active tab URL to the Script Sentinel scanner, analyzes the resources the page loads, and returns a readable CSP recommendation. It can scan 1-3 pages, detect scripts, styles, images, fonts, frames, connections, mixed content, external domains, and optional SHA256 hashes. The add-on includes local recent scan history, a clear-history control, copyable CSP output, optional security header pack output, and a link to the full scanner at https://script-sentinel.com/generate-csp. The Firefox add-on is a free companion to the Script Sentinel website. Premium services are available separately at https://script-sentinel.com/pricing and include authenticated website scans up to 10 pages, CSP drift monitoring, scheduled scans, dashboard history, site verification, email alerts, rollout guidance, and developer export tools. Those premium features are not included inside the add-on. Privacy-first behavior: the add-on does not scan in the background, does not collect browsing history, and only sends the active tab URL when you explicitly click Generate CSP. ## Rankings - #136,870 — Overall ## Permissions and access ### Permissions - `activeTab` - `storage` ### Host permissions - `https://script-sentinel.com/*` ## Safety - **Risk impact:** Low risk impact - **Risk likelihood:** High risk likelihood ### Analysis details - Request access to the following domains: script-sentinel.com - This extension has low user count. Unpopular extensions may not be stable or safe. > Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing). ## Similar extensions and apps - [Content Security Policy (CSP) Generator](https://chrome-stats.com/d/csp-generator) — 582 users, 4.00 / 5 - [CSP Content Security Policy Generator](https://chrome-stats.com/d/content-security-policy-gen) — 253 users, 3.40 / 5 - [Quick CSP - Whitelist Generator](https://chrome-stats.com/d/quick-csp-whitelist-generator) — 1 users - [CSP Checker](https://chrome-stats.com/d/csp-checker) — 17 users - [CSPTool](https://chrome-stats.com/d/csptool) — 1 users - [CSP Evaluator](https://chrome-stats.com/d/csp-evaluator) — 370 users, 4.00 / 5 - [CSS Sentry](https://chrome-stats.com/d/css-sentry) — 1 users - [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 33 users, 5.00 / 5 - [CSP Evaluator ext](https://chrome-stats.com/d/csp-evaluator-ext) — 2 users - [React2shell - RSC Sentinel](https://chrome-stats.com/d/react2shell-rsc-sentinel) — 111 users, 5.00 / 5 - [CSP Tester](https://chrome-stats.com/d/csp-tester) — 74 users - [Laboratory (Content Security Policy / CSP Toolkit)](https://chrome-stats.com/d/laboratory-by-mozilla) — 1,625 users, 4.56 / 5 --- Source: [Chrome-Stats](https://chrome-stats.com/d/script-sentinel-csp-generator)