There is a playground to test content security policies (CSP) to search bypasses.
- Put your CSP
- Generate playground, click to the playground button
- You can test your bypasses via putting payloads to the JavaScript code, href attribute and html node.
Try here: https://ikemurami.github.io/playground-csp/
First, run the development server:
npm run dev
# or
yarn dev
# or
pnpm dev
Open http://localhost:3000 with your browser to see the result.
The project is deployed with Github Pages' actions (how you can make it).