Disable Content-Security-Policy for web application testing. When the icon is colored, CSP headers are disabled.

Latest Version

Version
4.0.0
Update
September 2, 2024
Size
29.02KiB
Developer
Category
Users
60,000+
Rating
3.63736 ★
Manifest Version
3
Web Store Status
Languages Support
English
English (UK)
See more
Permissions
Storage
ActiveTab
BrowsingData
DeclarativeNetRequest
See more

Disable Content-Security-Policy Extension

Use at your own risk. This disables the Content-Security-Policy header for a tab. Use this when testing what resources a new third-party tag includes onto the page.

Click the extension icon to disable Content-Security-Policy header for the tab. Click the extension icon again to re-enable Content-Security-Policy header.

Use this only as a last resort. Disabling Content-Security-Policy means disabling features designed to protect you from cross-site scripting. Prefer to use report-uri which instructs the browser to send CSP violations to a URI. That allows you keep Content-Security-Policy enabled in your browser but still know what got blocked. https://report-uri.com is a free tool that gives you a web interface to inspect CSP violations on your site.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Disable Content-Security-Policy", "default_locale": "en", "description": "__MSG_extDescription__", "version": "4.0.0", "author": "Phil Grayson", "homepage_url": "https://github.com/PhilGrayson/chrome-csp-disable", "manifest_version": 3, "permissions": [ "storage", "activeTab", "browsingData", "declarativeNetRequest" ], "background": { "service_worker": "service_worker.js" }, "action": { "default_title": "Content-Security-Policy headers are enabled for this tab", "default_icon": { "16": "images/icon38-off.png" } }, "icons": { "48": "images/icon48.png", "128": "images/icon128.png" }}
Read more

How to download and manually install Disable Content-Security-Policy extension for Chrome

Looking for a way to install Disable Content-Security-Policy extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Disable Content-Security-Policy extensions manually, this article outlines two simple methods to effortlessly install Disable Content-Security-Policy extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Disable Content-Security-Policy extension and manually install through Drag &Drop

If you ever need to manually install a Disable Content-Security-Policy extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Disable Content-Security-Policy Extension by clicking the "Download CRX" button on the website.

Look for the Disable Content-Security-Policy extension you wish to install. Go to the website and download the Disable Content-Security-Policy extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Disable Content-Security-Policy extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Disable Content-Security-Policy extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Disable Content-Security-Policy extension for Chrome and install in Developer Mode

This is another method to install Disable Content-Security-Policy extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Disable Content-Security-Policy extension file

Select and download the Disable Content-Security-Policy extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Disable Content-Security-Policy extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Disable Content-Security-Policy extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Disable Content-Security-Policy extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Disable Content-Security-Policy extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Always Disable Content-Security-Policy Extension · Developer Tools 60,000+ 18 ★ 13.2KiB

icon

Content Security Policy Override Extension · Developer Tools 60,000+ 9 ★ 13.54KiB

icon

CORS Unblock Extension · Developer Tools 60,000+ 162 ★ 203KiB

icon

Ignore X-Frame headers Extension · Developer Tools 60,000+ 155 ★ 7.6KiB

icon

Content Security Policy (CSP) Generator Extension · Developer Tools 60,000+ 14 ★ 2.65MiB

icon

Disable Content Security Policy Extension · Developer Tools 60,000+ 5 ★ 14.05KiB

icon

Requestly - Intercept, Modify & Mock HTTP Requests Extension · Developer Tools 60,000+ 1227 ★ 876KiB

icon

Resource Override Extension · Developer Tools 60,000+ 204 ★ 432KiB

icon

CSP Unblock Extension · Developer Tools 60,000+ 2 ★ 114KiB

icon

Allow CORS: Access-Control-Allow-Origin Extension · Productivity 60,000+ 279 ★ 78.31KiB

icon

CSP Evaluator Extension · Developer Tools 60,000+ 29 ★ 297KiB

icon

Allow CSP: Content-Security-Policy Extension · Developer Tools 60,000+ 2 ★ 49.95KiB

icon

ModHeader - Modify HTTP headers Extension · Developer Tools 60,000+ 1061 ★ 676KiB

icon

CSP Tester Extension · Developer Tools 60,000+ 7 ★ 16.61KiB

icon

Moesif Origin/CORS Changer & API Logger Extension · Developer Tools 60,000+ 191 ★ 823KiB

icon

Apollo Client Devtools Extension · Developer Tools 60,000+ 266 ★ 490KiB

icon

Cross Domain - CORS Extension · Developer Tools 60,000+ 65 ★ 121KiB

icon

Postman Interceptor Extension · Developer Tools 60,000+ 957 ★ 478KiB

icon

Tamper Chrome (extension) Extension · Developer Tools 60,000+ 233 ★ 20.92KiB

icon

Simple WebSocket Client Extension · Developer Tools 60,000+ 97 ★ 53.95KiB

icon

tweak: mock and modify HTTP requests Extension · Developer Tools 60,000+ 190 ★ 3.22MiB

icon

Request Interceptor Extension · Developer Tools 60,000+ 58 ★ 1.89MiB

icon

Chrome extension source viewer Extension · Developer Tools 60,000+ 422 ★ 227KiB

icon

Xdebug helper Extension · Developer Tools 60,000+ 429 ★ 70.13KiB

User reviews

icon

DEV (ID: 000000437a703857) Voted 2 ★ - Updated 11/06/2023 did not work locally with iframe logging still this err "Refused to frame 'https://stage.mydomain.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://mydomain.com https://*.mydomain.com""

icon

Julián Andrés Núñez (ID: 000000df539ba363) Voted 5 ★ - Updated 07/17/2023 Works fine after refresh

icon

SpamBox (ID: 000000b1ce7e2b1c) Voted 1 ★ - Updated 06/09/2023 Don't waste your time, it doesn't work at all. It had one job to do and it fails miserably at it. Absolutely no change.

icon

Kyle Keating (ID: 0000007bb067e4c4) Voted 1 ★ - Updated 05/31/2023 Still got "Refused to frame" error in Chrome related to the content security policy. Did not work for me.

icon

Brian Coale (ID: 000000bb2cf1ade2) Voted 2 ★ - Updated 05/18/2023 Did/changed nothing. All the same CSPs showed up after toggle as were there before, not sure what this is actually for?