WorkspaceSecurity & CryptographyClient-Side Sandbox

HTTP Security Headers Reference

Interactive reference and generator for CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

Input Buffer

1 ln · 21 ch · 21 B

ENCODING: UTF-8AUTO-RUN: ENABLED

Output Buffer

OUT: 1 LN · 0 B⌘↵ RUN · ⌘⇧C COPY

How to Use HTTP Security Headers Reference

Review OWASP recommended HTTP response headers and generate drop-in configurations for Next.js, Nginx, and Cloudflare.

Run / Process tool outputCtrl + Enter

Copy primary output to clipboardCtrl + Shift + C

Open global command paletteCtrl + K

Evaluate password entropy in bits, character pool diversity, pattern weaknesses, and offline crack-time estimates.

Generate SHA-1, SHA-256, SHA-384, and SHA-512 cryptographic digests simultaneously using Web Crypto API.

Compute Hash-based Message Authentication Codes (HMAC-SHA256, HMAC-SHA384, HMAC-SHA512) with a secret key.

Authenticated AES-256-GCM client-side encryption and decryption using PBKDF2 (100,000 iterations) key derivation.

Generate 2048-bit or 4096-bit RSA-OAEP / RSASSA-PKCS1-v1_5 public and private key pairs in PEM (SPKI / PKCS#8) and JWK formats.

Deep security audit of JSON Web Tokens including HMAC-SHA256 signature verification, `alg: none` detection, and claim lifetime checks.