Always Disable Content-Security-Policy Chrome Extension Review
Always Disable Content-Security-Policy is a Chrome extension that allows users to disable the current page's Content Security Policy (CSP) headers for web application testing. This extension is a fork of Phil Grayson's extension, with the only difference being that this one disables the headers by default. The extension is available for free in the Browsers category, specifically under the Add-ons & Tools subcategory.
The icon of the extension changes color when CSP headers are disabled. It can be clicked again to re-enable the headers. However, users should be aware that disabling CSP headers means disabling features designed to protect them from cross-site scripting, and they should use this extension only as a last resort. Instead, they should prefer to use report-uri, which instructs the browser to send CSP violations to a URI and allows them to keep CSP enabled in their browser while still knowing what got blocked.
