Rating: 5 stars

This plugin has a learning curve. And it demands patience. But the results exceed expectations.

I used this plugin on a local server. I aimed to find Gutenberg Inline styles in (rendered) HTML. This plugin found the inline styles and several style attributes.

Rating: 5 stars

Works like it says on the box. Make sure you have the right PHP modules installed. Thanks for building this!

Rating: 5 stars

Not everything went smoothly, I had to abandon the Clearfy plugin and tinker with the settings, but it was worth it.

All СSP headers passed the evaluator-test successfully.

Rating: 5 stars

I’ve tried countless plugins for creating CSP policies, but none of them let you create strong policies that could actually mitigate XSS attacks. This plugin is pretty young and is made by a solo developer, naturally there are some rough edges for such a plugin. But these problems should go away with time.

Rating: 5 stars

The only possible solution for those who want to adopt a stricted csp.

I have installed dozens of plugins for the management of the CSP, but THERE IS NO OTHER FREE PLUGIN that allows to use scripts and CSS online without disabling the protection against XSS vulnerabilities.
All others disable the protection by adding the “unsafe-inline” directive.

The solution adopted by this plugin is the only intelligent one: it removes styles and scripts in line, putting them in external files (allowed by stricted policy).

Furthermore, the creator was very kind, thorough and helpful.

Although perhaps a bit immature, I absolutely recommend this plugin, to try!
Gianni