Introducing Aurelian: content-security-policy testing

Aurelian evaluates Content-Security-Policy configuration to find gaps that allow script injection and related browser attacks.

Use it to see which apps are actually protected, and which policies fail open.