Lint your Content-Security-Policy for XSS holes — right here in your browser.
🔒 100% local — your policy never leaves this page. No upload, no server.