Skip to main content
Agency Program Get 2× more leads and save 50% on hosting. Built for agencies ready to grow. Book a call
Content Security Policy Manager icon

Content Security Policy Manager

v1.2.1
by Patrick Sletvold · 4.3 (6 reviews)

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

3K+ active installs Updated Aug 09, 2022 Tested to 6.1.7 Requires PHP 7.2
Try Demo Download
Pre-installed Ready in ~10s No card

About Content Security Policy Manager

The Content Security Policy Manager plugin for WordPress allows you to easily configure different Content Security Policy headers for your site's admin interface, logged-in users, and regular visitors. You can enable, enforce, report, or disable individual CSP directives through a user-friendly interface. However, it does not provide assistance in determining the contents of the policy itself.

Changelog

This plugin’s development happens in its GitHub repo. Feel free to send bug reports there.

1.2.1

  • Fix error caused by improperly checking the chosen CSP mode when outputting headers (thanks @reatlat).

1.2.0

  • Improved UI, with CSP directives divided into collapsible categories.
  • Add all remaining non-deprecated CSP directives.
  • Warn if enabling upgrade-insecure-requests on a site that does not support HTTPS.
  • Sanitize directives on save and disallow newlines in header content.
  • Various internal improvements.

1.1.0

This is a relatively small update, that only contains a few more CSP directives. The next update will contain even more, along with an updated user interface.

  • Add some commonly used CSP headers that were missing (thanks Master Dan).
  • Add some other user requested directives.
  • Fix some translator comments.

1.0.0

First version.

  • Support for different policies for admin, logged-in frontend and regular visitors.
  • Different policies can have different reporting/enforcing mode.
  • Directives can be configured separately, to easier see what is allowed in which cases.
  • Support for configuring the Report-To header.

Try other plugins

Classic Editor icon

Classic Editor

4.9 · 9M+ installs

Enables the previous "classic" editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc. Supports all…