Content-Security-Policy and Drupal 11
The latest stable release, 2.2.4, declares a core version requirement of ^10.2 || ^11, which covers Drupal 11.
Configure a Content-Security-Policy header for your Drupal site to detect and mitigate the risk of Cross Site Scripting (XSS) and other vulnerabilities.
Key facts
- Project
- csp
- Latest stable with Drupal 11 support
- 2.2.4 (28 Apr 2026)
- Core version requirement
- ^10.2 || ^11
- Maintenance status
- Actively maintained
- Reported installs
- 24,974
- Last synced from drupal.org
- 21 Sept 2026
Every field above comes from the drupal.org API. The Drupal 11 status is derived from the core version requirement across this project's releases.
Source: drupal.org/project/csp
Related modules in Integrations
Webform
ReadyBuild forms to collect data from site visitors. Create everything from a simple contact form to a multi-page form with many fields, conditional logic, and email notifications.
webformLatest stable 6.3.0331,609 sitesMail System
ReadyProvides an Administrative UI and Developers API for managing the used mail backend/plugin. The module is ready to be used in Drupal 8, there are no known issues. Allows to use different backends for formatting and sending e-mails by default, per module and per mail key. Additionally, a theme can be configured that is used for sent mails.
mailsystemLatest stable 8.x-4.5152,366 sitesreCAPTCHA
ReadyUses the free reCAPTCHA service from Google to help protect websites from spam and abuse. It's easy for humans to solve, but hard for “bots” and other malicious software to figure out.
recaptchaLatest stable 8.x-3.5144,849 sitesGoogle Analytics
ReadyAdds the Google Analytics web statistics tracking system to your website. The module allows you to add the following statistics features to your site: Single/multi/cross domain tracking Selectively track/exclude certain users, roles and pages Monitor what type of links are tracked (downloads, outgoing and mailto) Monitor what files are downloaded from your pages Custom dimensions and metrics
google_analyticsLatest stable 4.0.3132,046 sitesGoogle Tag
ReadyGoogle Tag The 2.0.x branch supports Google Tag and Google Tag Manager . Users of Google Analytics should be using the 2.x version of this module. This project integrates the site with the Google Tag Manager (GTM) application.
google_tagLatest stable 2.0.9110,350 sitesVideo Embed Field
ReadyVideo Embed field creates a simple field type that allows you to embed videos from YouTube and Vimeo and show their thumbnail previews simply by entering the video's url.
video_embed_fieldLatest stable 3.1.094,104 sites