Content-Security-Policy builder

Compose or audit a CSP header. Each directive is a textbox; paste an existing header to parse it back. Includes a hardness rating that flags unsafe-inline and friends.