CSP parsing and validation
Loading page
This may take a few seconds.
Loading page
This may take a few seconds.
If reChecker is not working correctly, describe the problem and the page where it happened. Leave an email or phone number; we will reply after checking.
Content Security Policy Analysis
CSP ограничивает источники скриптов, предотвращая выполнение вредоносного JavaScript при XSS уязвимостях.
Директива frame-ancestors заменяет устаревший X-Frame-Options и контролирует, в каких фреймах может отображаться страница.
upgrade-insecure-requests автоматически переводит HTTP ресурсы на HTTPS, устраняя предупреждения браузера.
Online analysis of Content-Security-Policy directives. Validate syntax and check sources. Get recommendations to strengthen your policy and fix errors.
CSP parsing and validation
Directive analysis (script-src, style-src, etc.)
Check sources
Detecting insecure settings
Recommendations
CSP is a header that restricts the sources of scripts, styles, and images. It protects against XSS and injection attacks. The browser blocks resources from unapproved domains.