Not reviewed
No code review on record
We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.
Want us to read this extension's code? Ask for a review and we'll queue it.
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
CSP Unblock is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites. It comes from a publisher with 32 extensions and was last updated in January 2026.
CSP Unblock Firefox extension security report
ID: csp-unblock
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Balvin
- Website
- Visit
Screenshots & videos
Install growth
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
No more Content-Security-Policy limitations. This extension removes all CSP-related headers during website testing.
Read the publisher’s full description
This extension removes the following CSP-related response headers to remove limitations caused by CSP. <ol><li>"content-security-policy" header</li><li>"content-security-policy-report-only" header</li><li>"x-webkit-csp" and "x-webkit-csp-report-only" headers</li><li>"x-content-security-policy" and "x-content-security-policy-report-only" headers</li><li>reporting APIs ("report-to" and "reporting-endpoints")</li></ol> Use Cases: 1. This extension can temporarily remove the limitations of CSP so that the developer can test inline and remote scripts. Also, you can load different cross-origin resources without any limitation. 2. Allow a website to load a remote worker script 3. Allow a website to play remote media Notes: 1. Disable the extension when you are browsing the internet. By removing CSP, the website's protection reduces significantly which might harm you. 2. The extension removes specified CSP-related headers from the top-frame and all sub-frame elements Definitions: "content-security-policy" header: The HTTP Content-Security-Policy response header allows website administrators to control resources the user agent is allowed to load for a given page. With a few exceptions, policies mostly involve specifying server origins and script endpoints. This helps guard against cross-site scripting attacks (Cross-site_scripting). "content-security-policy-report-only" header: The HTTP Content-Security-Policy-Report-Only response header allows web developers to experiment with policies by monitoring (but not enforcing) their effects. These violation reports consist of JSON documents sent via an HTTP POST request to the specified URI.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 indicator
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Gain full insight into all external connections.
Upgrade for full visibility.
