SOSECIO
Local processing active
Use tool

CSP sandbox and iframe sandbox lookup

Search sandbox tokens, compare the CSP sandbox directive with the iframe sandbox attribute, and review script, origin, form, popup, navigation, and download combinations.

This is a local token lookup and combination guide. It does not make network or URL requests, run pages, execute user HTML, test remote headers, or certify a site.

Scenario presets

Presets filter and highlight related tokens only; they only change the current view.

Token matrix

Combination warnings and misconceptions

Default complete analysis report

The report uses only built-in tokens, the selected filter, and the scenario name. It excludes search text, URLs, cookies, secrets, and arbitrary user text.

CSP Sandbox complete analysis report

Official references

Static official documentation links for token semantics. They do not use page input.

Recommended from common tool workflows. This section does not read or pass page input.

Hash calculatorCalculate SHA-1, SHA-256, SHA-384, and SHA-512 digests with Web Crypto for UTF-8, Hex, Base64, and Base64URL byte input.HMAC and webhook signature debuggerCalculate HMAC locally with Web Crypto for webhook and API signature debugging, presets, and complete analysis verification reports.Webhook signature recipe lookupLook up webhook signature headers, raw-body rules, timestamp and replay checks, payload joining, and server-side validation recipes without secret input.JWT decoderDecode JWT header and payload locally, with optional pasted RSA JWK or JWKS public-key checks for RS256, RS384, and RS512.