CSP Header Builder & Validator
Build and inspect a Content-Security-Policy header with common directives and safe defaults.
Build CSPDeveloper Tools
Convert between ZIP and uncompressed TAR archives locally. Clear limitations are shown and sensitive credentials are never sent to the visitor browser.
Choose files or drag and drop them here. Processing stays in your browser unless the tool clearly says it uses a configured API.
The code, structured data, expression, token, or sample value requested by the interface.
Choose only the settings that apply to the result you need; leave optional controls unchanged when you are unsure.
Start the task and wait for the interface to return its result or a clear setup message.
Test the result in a non-production environment. Never paste passwords, private keys, live access tokens or confidential production data.
Build and inspect a Content-Security-Policy header with common directives and safe defaults.
Build CSPConvert old-to-new URL mappings into Apache .htaccess or Nginx redirect rules.
Generate RulesCreate responsive srcset, sizes and picture markup from image filenames and width variants.
Generate MarkupGenerate SHA-256, SHA-384 or SHA-512 Subresource Integrity values for a local file or public asset.
Generate SRIBuild a Permissions-Policy header for browser capabilities such as camera, microphone and geolocation.
Generate HeaderThe code, structured data, expression, token, or sample value requested by the interface. Start with a representative input and use only the options needed for your intended result.
A transformed, generated, or diagnostic result for the submitted technical input. Confirm both the source and destination formats; conversion can change unsupported formatting, metadata or quality.
Test the result in a non-production environment. Never paste passwords, private keys, live access tokens or confidential production data.
Processing stays in the browser where the individual feature supports it. Live public checks use a protected, rate-limited site endpoint; avoid unnecessary sensitive data.
The page can be used without creating a visitor account. Your browser or device may limit unusually large files or demanding media jobs.
Use ZIP / TAR Archive Converter when you need a focused result without installing a separate desktop application. Convert between ZIP and uncompressed TAR archives locally. The result changes when the source data or selected options change, so it is easy to run a second comparison.
The code, structured data, expression, token, or sample value requested by the interface.
A transformed, generated, or diagnostic result for the submitted technical input.
For a typical workflow, use it to inspect a small representative sample before applying the same change in a production workflow. Start with a representative input, inspect the first result, then adjust one setting at a time if you need a different outcome.
Processing stays in the browser where the individual feature supports it. Live public checks use a protected, rate-limited site endpoint; avoid unnecessary sensitive data.