Regex Tester & Validator

Test, validate and match regular expressions

← GalleryListOfSourcesSeparatedBySpaces✨ Emoji Combos

@"^((?'isolated_keywords'('none')|(deny))|((?'single'(?'just_scheme'[a-z]+\:)|(?'uri'(?'scheme'[a-z]+\:(?'scheme_separator'\/\/)?)?(?'host'[a-z0-9\-*]+\.[a-z0-9\-*.]+)(?'port':[0-9*]+)?)|('self')|(sameorigin))(?'list'((?'list_separator'\ )(?'list_content'(?'just_scheme_in_list'[a-z]+\:)|(?'uri_in_list'(?'scheme_in_list'[a-z]+\:(?'scheme_separator_in_list'\/\/)?)?(?'host_in_list'[a-z0-9\-*]+\.[a-z0-9\-*.]+)?(?'port_in_list':[0-9*]+)?)))+)?))$"gm.NET 10+06 years ago✓ Pre-loaded

About this regex

Validates Content Security Policy (CSP) source lists, supporting keywords like 'none', 'self', 'sameorigin', 'deny', as well as URI patterns with optional scheme, host, and port components. Accepts single sources or space-separated lists of sources (e.g., https://example.com:443 http: 'self'). Uses named groups to identify individual components like scheme, host, port, and separators. Commonly used for validating CSP directive values in security headers or configuration files.

csp security validation source-list content-security-policy

Loading editor…

← GalleryListOfSourcesSeparatedBySpaces✨ Emoji Combos

About this regex

csp security validation source-list content-security-policy

Loading editor…