This extension removes the following CSP-related response headers to remove limitations caused by CSP. 1. 'content-security-policy' header 2. 'content-security-policy-report-only' header 3. 'x-webkit-csp' header 4. 'x-content-security-policy' header Use Cases: 1. This extension can temporarily remove the limitations of CSP so that the developer can test inline and remote scripts. Also, you can load different cross-origin resources without any limitation. 2. Allow a website to load a remote worker script 3. Allow a website to play remote media Notes: 1. Disable the extension when you are browsing the internet. By removing CSP, the websites protection reduces significantly which might harm you. 2. The extension removes specified CSP-related headers from the top-frame and all sub-frame elements Definitions: 'content-security-policy' header: The HTTP Content-Security-Policy response header allows website administrators to control resources the user agent is allowed to load for a given page. With a few exceptions, policies mostly involve specifying server origins and script endpoints. This helps guard against cross-site scripting attacks (Cross-site_scripting). 'content-security-policy-report-only' header: The HTTP Content-Security-Policy-Report-Only response header allows web developers to experiment with policies by monitoring (but not enforcing) their effects. These violation reports consist of JSON documents sent via an HTTP POST request to the specified URI.
You can Follow the below Step By Step procedure to install the CSP Unblock Chrome Extension to your Chrome Web browser.
It is the CSP Unblock Chrome extension download link you can download and install Chrome Browser.
Lightweight CORS web development tool allows developers to modify Ajax responses Access-Control-Allow-Origin:*.
Automatically generate content security policy headers online for any website.
Cross Domain will help you to deal with cross domain - CORS problem. This is tool helpful when face with cross domain issue.
Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
Always Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
Easily add (Access-Control-Allow-Origin: *) rule to the response header.
Modify the Content Security Policy of web pages.
CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.
Easily remove X-Frame-Options from the response header.
Easily remove CSP (Content-Security-Policy) rules from the response header.