{"id":505,"date":"2026-08-06T16:35:36","date_gmt":"2026-08-06T14:35:36","guid":{"rendered":"https:\/\/www.lukaswojcik.com\/?page_id=505"},"modified":"2026-08-06T16:40:58","modified_gmt":"2026-08-06T14:40:58","slug":"csp-header-generator-tracking-linter","status":"publish","type":"page","link":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/","title":{"rendered":"CSP Header Generator &#038; Tracking-Linter"},"content":{"rendered":"<div id=\"csp-tool-wrapper\" style=\"max-width: 100%; background: #1e293b; color: #f8fafc; padding: 28px; border-radius: 12px; font-family: system-ui, -apple-system, sans-serif; box-shadow: 0 4px 20px rgba(0,0,0,0.3); border: 1px solid #334155;\">\n<p>    <!-- Privacy Notice Banner --><\/p>\n<div style=\"display: flex; align-items: center; gap: 12px; background: rgba(56, 189, 248, 0.08); border: 1px solid rgba(56, 189, 248, 0.2); padding: 12px 16px; border-radius: 8px; margin-bottom: 24px; font-size: 0.85rem; color: #38bdf8; line-height: 1.4;\">\n        <svg style=\"width: 20px; height: 20px; flex-shrink: 0;\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" viewBox=\"0 0 24 24\"><path stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z\"><\/path><\/svg><br \/>\n        <span><strong>Privacy Guarantee:<\/strong> No data entered here is stored on my server or transferred anywhere else. Everything runs 100% locally in your browser.<\/span>\n    <\/div>\n<h3 style=\"margin-top: 0; color: #38bdf8; font-size: 1.25rem; border-bottom: 1px solid #334155; padding-bottom: 12px; margin-bottom: 20px;\">CSP Header Generator &amp; Tracking-Linter<\/h3>\n<p>    <!-- Tracking Presets Checkboxes --><\/p>\n<div style=\"margin-bottom: 20px;\">\n        <label style=\"display: block; font-size: 0.85rem; color: #cbd5e1; margin-bottom: 10px; font-weight: 600;\">Allowed Analytics &amp; Tracking Providers<\/label><\/p>\n<div style=\"display: flex; flex-wrap: wrap; gap: 16px;\">\n            <label style=\"display: flex; align-items: center; gap: 8px; font-size: 0.875rem; color: #e2e8f0; cursor: pointer;\"><br \/>\n                <input type=\"checkbox\" id=\"csp-gtm\" checked=\"\" style=\"cursor: pointer;\"> Google Tag Manager &amp; GA4<br \/>\n            <\/label><br \/>\n            <label style=\"display: flex; align-items: center; gap: 8px; font-size: 0.875rem; color: #e2e8f0; cursor: pointer;\"><br \/>\n                <input type=\"checkbox\" id=\"csp-matomo\" style=\"cursor: pointer;\"> Matomo Analytics<br \/>\n            <\/label><br \/>\n            <label style=\"display: flex; align-items: center; gap: 8px; font-size: 0.875rem; color: #e2e8f0; cursor: pointer;\"><br \/>\n                <input type=\"checkbox\" id=\"csp-youtube\" style=\"cursor: pointer;\"> YouTube \/ Vimeo Embeds<br \/>\n            <\/label>\n        <\/div>\n<\/p><\/div>\n<p>    <!-- Custom Server-Side GTM domain --><\/p>\n<div style=\"margin-bottom: 24px;\">\n        <label style=\"display: block; font-size: 0.85rem; color: #cbd5e1; margin-bottom: 6px;\">Custom Server-Side GTM Endpoint (Optional)<\/label><br \/>\n        <input type=\"text\" id=\"csp-custom\" placeholder=\"e.g. https:\/\/tracking.lukaswojcik.com\" style=\"width: 100%; padding: 10px; background: #0f172a; border: 1px solid #475569; color: #fff; border-radius: 6px; box-sizing: border-box;\">\n    <\/div>\n<p>    <!-- Outputs --><\/p>\n<div style=\"margin-bottom: 18px;\">\n<div style=\"display: flex; justify-content: space-between; align-items: center; margin-bottom: 6px;\">\n            <label style=\"font-size: 0.8rem; color: #94a3b8; text-transform: uppercase; font-weight: 600;\">Raw Content-Security-Policy Header<\/label><br \/>\n            <button onclick=\"copyCspText('csp-out-raw', this)\" style=\"background: rgba(71, 85, 105, 0.4); border: 1px solid #475569; color: #cbd5e1; padding: 3px 10px; font-size: 0.75rem; border-radius: 4px; cursor: pointer;\">Copy Raw<\/button>\n        <\/div>\n<p>        <textarea id=\"csp-out-raw\" readonly=\"\" rows=\"3\" style=\"width: 100%; padding: 12px; background: #0f172a; border: 1px solid #38bdf8; color: #38bdf8; font-family: monospace; font-size: 0.85rem; border-radius: 6px; box-sizing: border-box;\"><\/textarea>\n    <\/div>\n<div>\n<div style=\"display: flex; justify-content: space-between; align-items: center; margin-bottom: 6px;\">\n            <label style=\"font-size: 0.8rem; color: #94a3b8; text-transform: uppercase; font-weight: 600;\">Nginx Header Configuration<\/label><br \/>\n            <button onclick=\"copyCspText('csp-out-nginx', this)\" style=\"background: rgba(71, 85, 105, 0.4); border: 1px solid #475569; color: #cbd5e1; padding: 3px 10px; font-size: 0.75rem; border-radius: 4px; cursor: pointer;\">Copy Nginx<\/button>\n        <\/div>\n<p>        <input type=\"text\" id=\"csp-out-nginx\" readonly=\"\" style=\"width: 100%; padding: 10px; background: #0f172a; border: 1px solid #334155; color: #cbd5e1; font-family: monospace; font-size: 0.85rem; border-radius: 6px; box-sizing: border-box;\">\n    <\/div>\n<\/div>\n<p><script>\nfunction buildCsp() {\n    const isGtm = document.getElementById('csp-gtm').checked;\n    const isMatomo = document.getElementById('csp-matomo').checked;\n    const isYt = document.getElementById('csp-youtube').checked;\n    const custom = document.getElementById('csp-custom').value.trim();<\/p>\n<p>    let scriptSrc = [\"'self'\", \"'unsafe-inline'\"];\n    let imgSrc = [\"'self'\", \"data:\"];\n    let connectSrc = [\"'self'\"];\n    let frameSrc = [\"'self'\"];<\/p>\n<p>    if (isGtm) {\n        scriptSrc.push(\"www.googletagmanager.com\", \"www.google-analytics.com\");\n        imgSrc.push(\"www.google-analytics.com\", \"www.googletagmanager.com\", \"analytics.google.com\");\n        connectSrc.push(\"www.google-analytics.com\", \"analytics.google.com\", \"region1.google-analytics.com\");\n    }\n    if (isMatomo) {\n        scriptSrc.push(\"cdn.matomo.cloud\");\n        connectSrc.push(\"matomo.cloud\");\n    }\n    if (isYt) {\n        frameSrc.push(\"www.youtube.com\", \"player.vimeo.com\");\n    }\n    if (custom) {\n        connectSrc.push(custom);\n        scriptSrc.push(custom);\n    }<\/p>\n<p>    const csp = `default-src 'self'; script-src ${scriptSrc.join(\" \")}; img-src ${imgSrc.join(\" \")}; connect-src ${connectSrc.join(\" \")}; frame-src ${frameSrc.join(\" \")};`;<\/p>\n<p>    document.getElementById('csp-out-raw').value = csp;\n    document.getElementById('csp-out-nginx').value = `add_header Content-Security-Policy \"${csp}\" always;`;\n}<\/p>\n<p>document.querySelectorAll('#csp-tool-wrapper input').forEach(el => {\n    el.addEventListener('change', buildCsp);\n    el.addEventListener('input', buildCsp);\n});\nbuildCsp();<\/p>\n<p>function copyCspText(id, btn) {\n    const field = document.getElementById(id);\n    navigator.clipboard.writeText(field.value).then(() => {\n        const oldText = btn.innerText;\n        btn.innerText = 'Copied!';\n        btn.style.color = '#38bdf8';\n        setTimeout(() => btn.innerText = oldText, 1500);\n    });\n}\n<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Generate standard Content-Security-Policy (CSP) headers with preset permissions for GA4, GTM, Matomo, and Server-Side endpoints.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":38,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-tool-base.php","meta":{"footnotes":""},"class_list":["post-505","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CSP Header Generator &amp; Tracking-Linter - Lukas Wojcik - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CSP Header Generator &amp; Tracking-Linter - Lukas Wojcik - Blog\" \/>\n<meta property=\"og:description\" content=\"Generate standard Content-Security-Policy (CSP) headers with preset permissions for GA4, GTM, Matomo, and Server-Side endpoints.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/\" \/>\n<meta property=\"og:site_name\" content=\"Lukas Wojcik - Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-06T14:40:58+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/csp-header-generator-tracking-linter\\\/\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/csp-header-generator-tracking-linter\\\/\",\"name\":\"CSP Header Generator & Tracking-Linter - Lukas Wojcik - Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\"},\"datePublished\":\"2026-08-06T14:35:36+00:00\",\"dateModified\":\"2026-08-06T14:40:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/csp-header-generator-tracking-linter\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/csp-header-generator-tracking-linter\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/csp-header-generator-tracking-linter\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Toolbox\",\"item\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/toolbox\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CSP Header Generator &#038; Tracking-Linter\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\",\"name\":\"Lukas Wojcik - Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\",\"name\":\"luky\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"contentUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"width\":424,\"height\":636,\"caption\":\"luky\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\"},\"sameAs\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CSP Header Generator & Tracking-Linter - Lukas Wojcik - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/","og_locale":"en_US","og_type":"article","og_title":"CSP Header Generator & Tracking-Linter - Lukas Wojcik - Blog","og_description":"Generate standard Content-Security-Policy (CSP) headers with preset permissions for GA4, GTM, Matomo, and Server-Side endpoints.","og_url":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/","og_site_name":"Lukas Wojcik - Blog","article_modified_time":"2026-08-06T14:40:58+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/","url":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/","name":"CSP Header Generator & Tracking-Linter - Lukas Wojcik - Blog","isPartOf":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#website"},"datePublished":"2026-08-06T14:35:36+00:00","dateModified":"2026-08-06T14:40:58+00:00","breadcrumb":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/csp-header-generator-tracking-linter\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lukaswojcik.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Toolbox","item":"https:\/\/www.lukaswojcik.com\/blog\/en\/toolbox\/"},{"@type":"ListItem","position":3,"name":"CSP Header Generator &#038; Tracking-Linter"}]},{"@type":"WebSite","@id":"https:\/\/www.lukaswojcik.com\/blog\/#website","url":"https:\/\/www.lukaswojcik.com\/blog\/","name":"Lukas Wojcik - Blog","description":"","publisher":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lukaswojcik.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9","name":"luky","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","contentUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","width":424,"height":636,"caption":"luky"},"logo":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg"},"sameAs":["https:\/\/www.lukaswojcik.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/pages\/505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/comments?post=505"}],"version-history":[{"count":1,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/pages\/505\/revisions"}],"predecessor-version":[{"id":8948,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/pages\/505\/revisions\/8948"}],"up":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/pages\/38"}],"wp:attachment":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/media?parent=505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}