demo · v151

Header Codegen

Pick a deployment preset, optionally allow specific origins, and instantly emit the right header — plus the equivalent <meta> tag, the per-iframe allow="" attribute, and a Lighthouse-style lint of the resulting policy.

Static codegen. Headers emitted here can be pasted into your CDN / Nginx / Express middleware. The lint flags common pitfalls (self-only on a SaaS embed, asterisk on a payments page).

deployment preset

policy

generated

HTTP response header
<meta> equivalent (for static hosting)
per-iframe override (allow attribute)

lint

see also

implementation reference

Need the exact API surface, compatibility boundaries, errors, lifecycle, and source links? Read the matching gendn reference ↗