Skip to main content
Agency Program Get 2× more leads and save 50% on hosting. Built for agencies ready to grow. Book a call
Security Headers icon

Security Headers

v1.1
by SimonRWaters · 5.0 (8 reviews)

Plug-in to ease the setting of TLS headers for HSTS and similar

4K+ active installs Updated Feb 26, 2019 Tested to 5.1.19 Requires PHP 5.6
Try Demo Download
Pre-installed Ready in ~10s No card

About Security Headers

This plug-in allows you to set desired HTTP headers for your website without accessing the web server's configuration or using a .htaccess file. It includes controls for HSTS, HPKP, disabling content sniffing, XSS protection, clickjacking mitigation, and Expect-CT. These features help ensure the security and integrity of your website and protect against various types of attacks.

Changelog

1.1

Fix missing close anchor which breaks recent WordPress

1.0

Add support for wp-login.php page

Add support for Expect-CT header

0.9

Removed unnecessary whitespace in HSTS header (thanks Thomas)

Added Referrer-Policy header

Corrected plugins name from “HTTP Headers” to “Security Header” (thanks Jamie)

Removed trailing semi-colon from X-XSS-Protection (it worked but not needed)

0.8

Add headers to admin section of WordPress

Added option to set the X-Frame-Options headers to main site

Added HSTS Preload header (thanks to Jamie)

0.7

Add report-uri

Fix handling of non-numeric blank strings for HPKP max-age

0.6

HPKP support

Check for TLS before emitting HSTS or HPKP headers

0.5

Change h2 for h1 for accessibility per #31650

0.4

License change
Clarify wording for XSS protection in readme

0.3

Prepare for release

0.2

Added Sonarqube file and formatting changes

0.1

  • Initial release.

Try other plugins

Classic Editor icon

Classic Editor

4.9 · 9M+ installs

Enables the previous "classic" editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc. Supports all…