Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.

Latest Version

Version
4.0.0
Update
September 2, 2024
Size
29.02KiB
Developer
Category
Users
60,000+
Rating
3.63736 ★
Manifest Version
3
Web Store Status
Languages Support
English
English (UK)
See more
Permissions
Storage
ActiveTab
BrowsingData
DeclarativeNetRequest
See more

Disable Content-Security-Policy Extension

Use at your own risk. This disables the Content-Security-Policy header for a tab. Use this when testing what resources a new third-party tag includes onto the page.

Click the extension icon to disable Content-Security-Policy header for the tab. Click the extension icon again to re-enable Content-Security-Policy header.

Use this only as a last resort. Disabling Content-Security-Policy means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep Content-Security-Policy enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Disable Content-Security-Policy", "default_locale": "en", "description": "__MSG_extDescription__", "version": "4.0.0", "author": "Phil Grayson", "homepage_url": "https://github.com/PhilGrayson/chrome-csp-disable", "manifest_version": 3, "permissions": [ "storage", "activeTab", "browsingData", "declarativeNetRequest" ], "background": { "service_worker": "service_worker.js" }, "action": { "default_title": "Content-Security-Policy headers are enabled for this tab", "default_icon": { "16": "images/icon38-off.png" } }, "icons": { "48": "images/icon48.png", "128": "images/icon128.png" }}
Read more

Similar Extensions

icon

Always Disable Content-Security-Policy Extension · Developer Tools 60,000+ 18 ★ 13.2KiB

icon

Content Security Policy Override Extension · Developer Tools 60,000+ 9 ★ 13.54KiB

icon

CORS Unblock Extension · Developer Tools 60,000+ 162 ★ 203KiB

icon

Ignore X-Frame headers Extension · Developer Tools 60,000+ 155 ★ 7.6KiB

icon

Content Security Policy (CSP) Generator Extension · Developer Tools 60,000+ 14 ★ 2.65MiB

icon

Disable Content Security Policy Extension · Developer Tools 60,000+ 5 ★ 14.05KiB

icon

Requestly - Intercept, Modify & Mock HTTP Requests Extension · Developer Tools 60,000+ 1227 ★ 876KiB

icon

Resource Override Extension · Developer Tools 60,000+ 204 ★ 432KiB

icon

CSP Unblock Extension · Developer Tools 60,000+ 2 ★ 114KiB

icon

Allow CORS: Access-Control-Allow-Origin Extension · Productivity 60,000+ 279 ★ 78.31KiB

icon

CSP Evaluator Extension · Developer Tools 60,000+ 29 ★ 297KiB

icon

Allow CSP: Content-Security-Policy Extension · Developer Tools 60,000+ 2 ★ 49.95KiB

icon

ModHeader - Modify HTTP headers Extension · Developer Tools 60,000+ 1061 ★ 676KiB

icon

CSP Tester Extension · Developer Tools 60,000+ 7 ★ 16.61KiB

icon

Moesif Origin/CORS Changer & API Logger Extension · Developer Tools 60,000+ 191 ★ 823KiB

icon

Apollo Client Devtools Extension · Developer Tools 60,000+ 266 ★ 490KiB

icon

Cross Domain - CORS Extension · Developer Tools 60,000+ 65 ★ 121KiB

icon

Postman Interceptor Extension · Developer Tools 60,000+ 957 ★ 478KiB

icon

Tamper Chrome (extension) Extension · Developer Tools 60,000+ 233 ★ 20.92KiB

icon

Simple WebSocket Client Extension · Developer Tools 60,000+ 97 ★ 53.95KiB

icon

tweak: mock and modify HTTP requests Extension · Developer Tools 60,000+ 190 ★ 3.22MiB

icon

Request Interceptor Extension · Developer Tools 60,000+ 58 ★ 1.89MiB

icon

Chrome extension source viewer Extension · Developer Tools 60,000+ 422 ★ 227KiB

icon

Xdebug helper Extension · Developer Tools 60,000+ 429 ★ 70.13KiB

User reviews

icon

DEV (ID: 000000437a703857) Voted 2 ★ - Updated 11/06/2023 did not work locally with iframe logging still this err "Refused to frame 'https://stage.mydomain.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://mydomain.com https://*.mydomain.com""

icon

Julián Andrés Núñez (ID: 000000df539ba363) Voted 5 ★ - Updated 07/17/2023 Works fine after refresh

icon

SpamBox (ID: 000000b1ce7e2b1c) Voted 1 ★ - Updated 06/09/2023 Don't waste your time, it doesn't work at all. It had one job to do and it fails miserably at it. Absolutely no change.

icon

Kyle Keating (ID: 0000007bb067e4c4) Voted 1 ★ - Updated 05/31/2023 Still got "Refused to frame" error in Chrome related to the content security policy. Did not work for me.

icon

Brian Coale (ID: 000000bb2cf1ade2) Voted 2 ★ - Updated 05/18/2023 Did/changed nothing. All the same CSPs showed up after toggle as were there before, not sure what this is actually for?