This is a fork of Phil Graysons extension with the only difference being that this one disables the headers by default. Original: https://chrome.google.com/webstore/detail/disable-content-security/ieelmcmcagommplceebfedjlakkhpden Use at your own risk. Disables the current pages Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page. Click the extension icon to re-enable CSP headers. Click the extension icon again to disable CSP headers. Use this only as a last resort. Disabling CSP means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep CSP enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
You can Follow the below Step By Step procedure to install the Always Disable Content-Security-Policy Chrome Extension to your Chrome Web browser.
It is the Always Disable Content-Security-Policy Chrome extension download link you can download and install Chrome Browser.
Automatically generate content security policy headers online for any website.
Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
Easily add (Access-Control-Allow-Origin: *) rule to the response header.
Modify the Content Security Policy of web pages.
No more CORS error by appending 'Access-Control-Allow-Origin: *' header to local and remote web requests when enabled
Drops X-Frame-Options and Content-Security-Policy HTTP response headers, allowing all pages to be iframed.
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
Easily remove CSP (Content-Security-Policy) rules from the response header.
No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.