CSP analyzer.

per-directive findings · XSS posture · clickjacking · nonce/strict-dynamic guidance

🔒 Pasted policies are analyzed in your browser. Only the "fetch URL" mode makes an outbound request from the Cloudflare edge.