Your files stay on your device

# CSP report analyzer

Paste CSP violation reports and see them grouped by directive and source, with extension noise separated and an honest verdict on which policy changes the evidence supports.

Paste violation reports and the grouped analysis builds here.

The verdict is deliberately conservative. Extension traffic and redacted destinations support no policy change, inline and eval violations call for nonces or hashes rather than origin allowlists, and only real blocked origins argue for adding anything to the policy. The analyzer will not suggest 'unsafe-inline' under any input.
Options

## More web & auth tools

- [CSP evaluator & builder](/web/csp)
- [HTTP header parser](/web/headers)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/csp-report-analyzer
Markdown version: https://nutter.tools/web/csp-report-analyzer.md
Plain-text version: https://nutter.tools/web/csp-report-analyzer.txt
Agent index: https://nutter.tools/llms.txt