Show HN: A Browser Extension for Testing Content Security Policy

csptool.net

One of the things I struggled with a lot when doing web development was developing effective CSP directives, so I built a browser extension for Chrome and Firefox to assist in this task.

Open articleView on HN

This is genuinely useful.

CSP always feels like one of those things that sounds straightforward in theory, but gets annoying fast once you are trying to make a real app work without punching accidental holes in the policy.

Curious how you approached the feedback loop: does the extension mainly help generate directives, or does it also help explain which current policy rule is actually causing a given breakage?

Reply on news.ycombinator.com