Content Security Policy Python Packages

secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

csp-toolkit

Content Security Policy analysis, bypass detection, and CI gating. 21 weakness checks with A+ to F grading, 79 known bypass domains, SARIF output, and a GitHub Action.

fastapi-csp-docs

CSP-safe replacements for FastAPI's built-in /docs, /redoc, and OAuth2 redirect endpoints, with no inline script or style, so a strict Content-Security-Policy still works

fastapi-security-headers

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

inlinehashes

Hash generator for HTML inline styles and scripts

django-csp-advanced

A powerful CSP middleware for Django.

csp-scan

Scan HTML files in directory and build CSP (content-security-policy) header