Content Security Policy (CSP) Hash & Directive Generator
Calculate cryptographic SHA-256, SHA-384, and SHA-512 Base64 hashes for inline scripts and styles to deploy strict CSP Level 3 headers without unsafe-inline.
Inline Code & Directive Options
⚠️ Hashes are strictly whitespace-sensitive. Do not include outer <script> or <style> tags.
Cryptographic Hash Result
W3C CSP3 VALID
Calculated Directive Hash Value:
'sha256-a...'
27 bytes UTF-8 encoded
Target Directive
script-src
W3C directive selector
Hash Algorithm
SHA-256
Base64 encoded digest
Complete HTTP Response Header
Content-Security-Policy: script-src 'sha256-...' 'strict-dynamic' https: 'unsafe-inline'; object-src 'none'; base-uri 'none';
HTML Meta Tag Equivalent
<meta http-equiv="Content-Security-Policy" content="script-src 'sha256-...';">