English
English (UK)
See more
English (UK)
Always Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.
Latest Version
Version
1.0.7
Update
January 10, 2020
Size
13.2KiB
Developer
Category
Users
10,000+ 
Rating
3.88889 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
WebRequest
WebRequestBlocking
BrowsingData
Http://*/*
Https://*/*
See more
WebRequestBlocking
BrowsingData
Http://*/*
Https://*/*
Always Disable Content-Security-Policy Extension
This is a fork of Phil Grayson's extension with the only difference being that this one disables the headers by default. Original: https://chrome.google.com/webstore/detail/disable-content-security/ieelmcmcagommplceebfedjlakkhpden
Use at your own risk. Disables the current page's Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page.
Click the extension icon to re-enable CSP headers. Click the extension icon again to disable CSP headers.
Use this only as a last resort. Disabling CSP means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep CSP enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
Read more
Use at your own risk. Disables the current page's Content Security Policy. Useful when testing what resources a new third-party tag includes onto the page.
Click the extension icon to re-enable CSP headers. Click the extension icon again to disable CSP headers.
Use this only as a last resort. Disabling CSP means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep CSP enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Always Disable Content-Security-Policy", "default_locale": "en", "description": "__MSG_extDescription__", "version": "1.0.7", "author": "Phil Grayson", "homepage_url": "https://github.com/PhilGrayson/chrome-csp-disable", "manifest_version": 2, "permissions": ["webRequest", "webRequestBlocking", "browsingData", "http://*/*", "https://*/*"], "background": { "scripts": ["background.js"], "persistent": true }, "browser_action": { "default_title": "Content-Security-Policy headers are disabled", "default_icon": { "16": "images/icon38-off.png" } }, "icons": { "48": "images/icon48.png", "128": "images/icon128.png" }}
Read more
