CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.

Latest Version

Version
0.3.2
Update
July 12, 2024
Size
297KiB
Developer
Category
Users
20,000+
Rating
2.96552 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
Storage
WebRequest
See more

CSP Evaluator Extension

CSP Evaluator is a small tool that allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks. Reviewing CSP policies is usually a very manual process and most developers are not aware of CSP bypasses.
CSP Evaluator checks are based on a large-scale empirical study and are aimed to help developers to harden their CSP. This tool is provided only for the convenience of developers and Google provides no guarantees or warranties for this tool.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "action": { "default_icon": "resources/icon-grey.png", "default_popup": "app.html" }, "background": { "service_worker": "background.js", "type": "module" }, "content_scripts": [ { "js": [ "contentscript.js" ], "matches": [ "" ], "run_at": "document_start", "world": "ISOLATED" } ], "description": "CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.", "host_permissions": [ "" ], "icons": { "128": "resources/icon128.png", "16": "resources/icon16.png", "48": "resources/icon48.png" }, "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTdUrnDTdQe6lGka/IE62s/+41don/T6yFYZhU78nkuyqElw5iWij+0vd+RpEyaGw3Gvr3bvg7q+6PJDnGiNuEmrK+1JjSlBjRmZacVl+T2/+bescjwY9VYuIdE6m/4ZRoiixuEyZbxboGeNQRPTH7Nr8NNarDZd6sMIS9utX5WxLKvE6WUMAJrMS5rdCrfZz+LGKcJJFgvPnA5l+wu6jkn9LTjRWmggXLDOKP0emtIngzPrbQIpeM1nRBxXWgrHNjnLzxo0TOFr5LdmgjJXi8/ruWga9vohOnBcwR5bEncKt0K5aSHJ2TN+lrnszQHydK15XWJyC7Y1tpwoiNoSdQIDAQAB", "manifest_version": 3, "minimum_chrome_version": "88", "name": "CSP Evaluator", "permissions": [ "storage", "webRequest" ], "short_name": "CSP Evaluator", "version": "0.3.2", "web_accessible_resources": []}
Read more

How to download and manually install CSP Evaluator extension for Chrome

Looking for a way to install CSP Evaluator extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install CSP Evaluator extensions manually, this article outlines two simple methods to effortlessly install CSP Evaluator extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download CSP Evaluator extension and manually install through Drag &Drop

If you ever need to manually install a CSP Evaluator extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the CSP Evaluator Extension by clicking the "Download CRX" button on the website.

Look for the CSP Evaluator extension you wish to install. Go to the website and download the CSP Evaluator extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for CSP Evaluator extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the CSP Evaluator extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download CSP Evaluator extension for Chrome and install in Developer Mode

This is another method to install CSP Evaluator extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the CSP Evaluator extension file

Select and download the CSP Evaluator extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the CSP Evaluator extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your CSP Evaluator extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the CSP Evaluator extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install CSP Evaluator extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Content Security Policy Override Extension · Developer Tools 20,000+ 9 ★ 13.54KiB

icon

Content Security Policy (CSP) Generator Extension · Developer Tools 20,000+ 14 ★ 2.65MiB

icon

axe DevTools - Web Accessibility Testing Extension · Accessibility 20,000+ 114 ★ 2.89MiB

icon

CSP Tester Extension · Developer Tools 20,000+ 7 ★ 16.61KiB

icon

Always Disable Content-Security-Policy Extension · Developer Tools 20,000+ 18 ★ 13.2KiB

icon

Web Vitals Extension · Developer Tools 20,000+ 43 ★ 398KiB

icon

Security-Header-Extension Extension · Developer Tools 20,000+ 7 ★ 510KiB

icon

Caspr: Enforcer Extension · Developer Tools 20,000+ 7 ★ 478KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 20,000+ 43 ★ 7.14MiB

icon

Disable Content-Security-Policy Extension · Developer Tools 20,000+ 91 ★ 29.02KiB

icon

Xdebug helper Extension · Developer Tools 20,000+ 429 ★ 70.13KiB

icon

Datalayer Checker Extension · Developer Tools 20,000+ 33 ★ 93.13KiB

icon

Google Analytics Debugger Extension · Developer Tools 20,000+ 533 ★ 28.88KiB

icon

Analytics Debugger Extension · Developer Tools 20,000+ 211 ★ 300KiB

icon

retire.js Extension · Developer Tools 20,000+ 9 ★ 132KiB

icon

Allow CSP: Content-Security-Policy Extension · Developer Tools 20,000+ 2 ★ 49.95KiB

icon

Recx Security Analyser Extension · Developer Tools 20,000+ 11 ★ 71.46KiB

icon

Vulners Web Scanner Extension · Productivity 20,000+ 20 ★ 534KiB

icon

Requestly - Intercept, Modify & Mock HTTP Requests Extension · Developer Tools 20,000+ 1227 ★ 876KiB

icon

BrowserStack Extension · Developer Tools 20,000+ 95 ★ 805KiB

icon

WAVE Evaluation Tool Extension · Accessibility 20,000+ 143 ★ 344KiB

icon

dataslayer Extension · Developer Tools 20,000+ 80 ★ 417KiB

icon

Clickjacking Test Extension · Developer Tools 20,000+ 9 ★ 71.23KiB

icon

Adswerve - dataLayer Inspector+ Extension · Developer Tools 20,000+ 56 ★ 517KiB

User reviews

icon

Helio Bentes (ID: 000000c4d506f16e) Voted 1 ★ - Updated 04/17/2023 It doesn't detect meta CSP and it doesn't say anything about it on the description

icon

Serghei Iakovlev (ID: 00000091940cefba) Voted 1 ★ - Updated 04/17/2023 For some unknown reason, when the extension was enabled, my browser sent additional requests to the sites. As a result, I lost a lot of hours debugging my site and trying to find the cause of the duplicate requests. As soon as I turned off the extension, the problem disappeared.

icon

Justus Wingert (ID: 000000c3a8d2f012) Voted 5 ★ - Updated 10/25/2022 Macht wenig überraschend exakt das was dran steht. Keine Ahnung was an anderer Stelle schief gegangen ist, aber es funktioniert sogar in Edge.

icon

Support Analytics RESONEO (ID: 000000ce037ca3d0) Voted 1 ★ - Updated 09/06/2022 Keeps crashing in Chrome 104

icon

Enis Shala (ID: 00000002568dbebb) Voted 1 ★ - Updated 08/25/2022 used it sometime ago and it was working just fine, with current version of chrome is not working anymore, it keeps crashing Version 104.0.5112.101