Documentation

Install CSP Manager

Install on Magento Open Source or Adobe Commerce 2.4.7+, then add storefront CSP rules in Admin. This module is for the storefront, not the Magento Admin panel’s own CSP.

A zip file of the extension will be emailed to you after you purchase. Use that zip for the steps below.

app/code

Copy or symlink the module to app/code/Paradise/CspManager, then:

bin/magento module:enable Paradise_CspManager
bin/magento setup:upgrade
bin/magento cache:flush

After install

1. System → CSP Manager → Whitelist Rules. Add storefront CSP rules and choose which store views they apply to.
2. System → CSP Manager → CSP Policy Inspector. Pick a store view to see Magento’s built-in sources and the rules you added.

Rule fields

Identifier	Unique key, similar to an XML id.
Directive	script-src, connect-src, and other Magento whitelist directives.
Value type	host, hash, or scheme.
Value	cdn.example.com, a sha256-…= hash, or a scheme such as https.
Store View	All Store Views and/or specific storefront views.

Risky keywords such as 'self', 'unsafe-inline', 'unsafe-eval', and * are blocked. Those belong in developer-owned XML or Magento config, not in this Admin form.