CSP Radar

by Kianna Bartell

Visit

May 28, 2026 Security & Privacy

content security policy website security xss protection

Gallery

About

CSP Radar is a tool that helps generate a Content Security Policy (CSP) for a website without causing breakage. It scans a site's content and identifies the necessary policies to ensure proper functionality. The generated CSP can then be used to protect the site from cross-site scripting (XSS) attacks and other security threats.

Comments (4)

Adolphus Krajcik 1 week ago

Finally a CSP tool that doesn't involve spending hours in report-only mode praying nothing breaks. How does the scanner handle dynamically injected scripts and eval() calls, are you running a headless browser to catch those, or relying on CSP violation reports? Would love to know the architecture under the hood.

Brett Jones 1 week ago

Bold claim promising no breakage, CSP and that assurance go together like microservices and 'simple deployment.' Curious what the scanning approach actually looks like under the hood though. Does it use headless browser crawling to catch dynamically loaded assets, or is this just static HTML parsing? Because missing that third-party analytics script that only fires on the checkout page is exactly how you end up with an angry 2am Slack message.