CSP Evaluator API

About this product

Statically evaluates a Content Security Policy against W3C CSP Level 3 and returns one graded JSON report. GET /v1/check fetches a page and reads the Content-Security-Policy and Report-Only headers plus meta tags; POST /v1/validate takes policy text directly. Returns a verdict (enforced, report_only, no_csp, ineffective), scriptProtection (strict, allowlist, none, unknown) and issues with stable codes and spec links. A static assessment, not proof of safety.

Keywords