Disable Content-Security-Policy
What is Disable Content-Security-Policy?
Add-on stats
- webRequest
- webRequestBlocking
- browsingData
- http://*/*
- https://*/*
Ranking
Add-on summary
Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
Use at your own risk. This disables the Content-Security-Policy header for a tab. Use this when testing what resources a new third-party tag includes onto the page.
Click the extension icon to disable Content-Security-Policy header for the tab. Click the extension icon again to re-enable Content-Security-Policy header.
Use this only as a last resort. Disabling Content-Security-Policy means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep Content-Security-Policy enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
Add-on safety
Risk impact
Disable Content-Security-Policy is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install Disable Content-Security-Policy if you trust the publisher.
Risk likelihood
Disable Content-Security-Policy has earned a fairly good reputation and likely can be trusted.