CSP Friendly Security
by Pascal CESCATO · WordPress.org page · Website
CSP Friendly Security has 200+ active installs on WordPress.org and 3,429 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 27, 2026, tested up to WordPress 7.1.
CSP Friendly Security at a glance
Is CSP Friendly Security well maintained?
CSP Friendly Security reviews and ratings
4 reviews on WordPress.org, with the most recent ones as their authors posted them.
4 reviews
- 5★
-
2
- 4★
-
0
- 3★
-
1
- 2★
-
0
- 1★
-
1
-
Great plugin
I downloaded this plugin and modified it for my site. I would recommend doing that. The plugin hooks into the 'template_redirect' hook. At that point the source for the page has been generated by themes and plugins and is ready to be sent. The plugin looks through the generated source and makes nonces for all inline scripts and styles. It modifies the source so the inline scripts and styles have a nonce='some-nonce' statement in them. It creates a Content-Security-Policy which includes those nonces. However, each site has its own CSP needs, and so modifying the plugin to tailor the CSP to your site is not that difficult to do. That is what I have done.
amanandhishoe -
total cache compatibility issues
doesn't seem to work properly with w3tc. hope it will get updated at some point.
hayobethlehem -
Could be better
The plugin works as advertised however, it does not let you modify the CSP header resulting in a less than ideal CSP header. The header this plugin serves provides no protection against clickjacking and allows all external scripts.
Anonymous User -
Satisfied!
This is the most 'straight to the point' CSP tool that I've found. So far, so go.
OkorieWare
Details
Adds a CSP header compatible with most WP plugins without breaking styles.
The full description, screenshots and every review live on the WordPress.org page.
Tags
- content security policy
- csp
- nonces
- Security Headers
- sha256 hashes
More from Pascal CESCATO
-
Stop XML-RPC Attacks 6,000+ installs -
Newsletter Optin Block fewer than 10 installs
- Version
- 1.5.2
- Last updated
- Aug 27, 2026
- First published
- Apr 21, 2022
- Requires WordPress
- 5.9
- Tested up to
- 7.1
- Requires PHP
- 7.3
- Pricing
- Free on WordPress.org
CSP Friendly Security FAQ
How many active installs does CSP Friendly Security have?
WordPress.org reports 200+ active installs for CSP Friendly Security as of September 7, 2026.
Is CSP Friendly Security still maintained?
Yes. The last release was on August 27, 2026 and it is tested up to WordPress 7.1.
Is CSP Friendly Security free?
CSP Friendly Security is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.