Build a Content-Security-Policy header from a checklist, or paste an existing one to flag common risky patterns. Entirely client-side.
Free, unlimited, no account. If this saved you a paid tool, a small thanks is appreciated.