Documentation

Install CSP Manager

Install on Magento Open Source or Adobe Commerce 2.4.7+, then add storefront CSP rules in Admin. This module is for the storefront, not the Magento Admin panel’s own CSP.

A zip file of the extension will be emailed to you after you purchase. Use that zip for the steps below.

app/code

Copy or symlink the module to app/code/Paradise/CspManager, then:

bin/magento module:enable Paradise_CspManager
bin/magento setup:upgrade
bin/magento cache:flush

After install

Open Magento Admin and go to System → CSP Manager. The usage guide walks through Whitelist Rules, Policy Inspector, the Audit Log, and the Paradise CSP Rules cache with screenshots.

Rule fields

Identifier	Unique key, similar to an XML id.
Directive	script-src, connect-src, and other Magento whitelist directives.
Value type	host, hash, or scheme.
Value	cdn.example.com, a sha256-…= hash, or a scheme such as https.
Store View	All Store Views and/or specific storefront views.

Risky keywords such as 'self', 'unsafe-inline', 'unsafe-eval', and * are blocked. Those belong in developer-owned XML or Magento config, not in this Admin form.