CSP Builder / Analyzer
Monte e revise Content-Security-Policy com avisos práticos.
Builder rápido
default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https:; upgrade-insecure-requests
Analyzer
Boa base