Item logo image for Disable Content Security Policy (CSP)

Disable Content Security Policy (CSP)

furybee.org
ExtensionDeveloper Tools83 users
Item media 3 (screenshot) for Disable Content Security Policy (CSP)
Item media 1 (screenshot) for Disable Content Security Policy (CSP)
Item media 2 (screenshot) for Disable Content Security Policy (CSP)
Item media 3 (screenshot) for Disable Content Security Policy (CSP)
Item media 1 (screenshot) for Disable Content Security Policy (CSP)
Item media 1 (screenshot) for Disable Content Security Policy (CSP)
Item media 2 (screenshot) for Disable Content Security Policy (CSP)
Item media 3 (screenshot) for Disable Content Security Policy (CSP)

Overview

Disables the Content Security Policy (CSP) on web pages.

This extension is designed for developers and testers who need to temporarily disable Content-Security-Policy (CSP) headers while analyzing web applications. When the extension icon is colored, CSP headers are disabled. ⚠️ Warning: Use this extension at your own risk. Disabling CSP headers removes a critical security feature that helps protect against cross-site scripting (XSS) attacks. This tool should only be used in a testing or development environment and not for regular browsing or on production sites. Features: • Easy Toggle: Click the extension icon to disable CSP headers. Click again to re-enable them.

0 out of 5No ratings

Learn more about results and reviews.

Details

  • Version
    1.0.0
  • Updated
    October 22, 2025
  • Size
    56.44KiB
  • Languages
    2 languages
  • Developer
    Website
    Email
    hello@sebastienfontaine.me
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Related

CORS Pilot

5.0

The reliable CORS bypass for web developers. Whitelist-first, tab-scoped, credentials-aware. Works on localhost.

CORS Bypass — Per-Site CORS Unblock

3.0

Bypass CORS errors per-site with one click. Zero CPU overhead, smart domain protection. Built for developers.

CORS Bypass

3.0

when enabled, add the header 'Access-Control-Allow-Origin: *' to the response to resolve CORS errors.

CORS Unblock

4.2

Temporarily unblock CORS for development and testing purposes

Allow CSP: Content-Security-Policy

4.0

Easily remove CSP (Content-Security-Policy) rules from the response header.

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

Disable Content-Security-Policy

3.4

Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.

Anti-CORS, anti-CSP

4.1

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

iFrame Unlocker – Remove X-Frame-Options & CSP

5.0

This extension demonstrates a 'declarativeNetRequest' ruleset that blocks all requests to the domain 'example.com' on all frames.

Disable Content Security Policy

3.7

A extension that set csp value empty

Content Security Policy (CSP) Generator

4.6

Automatically generate content security policy headers online for any website.

Extension Manager

4.3

Manage your Chrome extensions comfortably by enabling and disabling them with ease.

CORS Pilot

5.0

The reliable CORS bypass for web developers. Whitelist-first, tab-scoped, credentials-aware. Works on localhost.

CORS Bypass — Per-Site CORS Unblock

3.0

Bypass CORS errors per-site with one click. Zero CPU overhead, smart domain protection. Built for developers.

CORS Bypass

3.0

when enabled, add the header 'Access-Control-Allow-Origin: *' to the response to resolve CORS errors.

CORS Unblock

4.2

Temporarily unblock CORS for development and testing purposes

Allow CSP: Content-Security-Policy

4.0

Easily remove CSP (Content-Security-Policy) rules from the response header.

CSP Unblock

4.0

No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.

Disable Content-Security-Policy

3.4

Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.

Anti-CORS, anti-CSP

4.1

Enable cross origin requests blocked by CORS or CSP. Disable CORS and CSP in selected hostnames, preserve security of other websites

Google apps