The Elementor Website Builder has it all: drag and drop page builder, pixel perfect design, mobile responsive editing,…
About Security Headers
This plug-in allows you to set desired HTTP headers for your website without accessing the web server's configuration or using a .htaccess file. It includes controls for HSTS, HPKP, disabling content sniffing, XSS protection, clickjacking mitigation, and Expect-CT. These features help ensure the security and integrity of your website and protect against various types of attacks.Changelog
1.1
Fix missing close anchor which breaks recent WordPress
1.0
Add support for wp-login.php page
Add support for Expect-CT header
0.9
Removed unnecessary whitespace in HSTS header (thanks Thomas)
Added Referrer-Policy header
Corrected plugins name from “HTTP Headers” to “Security Header” (thanks Jamie)
Removed trailing semi-colon from X-XSS-Protection (it worked but not needed)
0.8
Add headers to admin section of WordPress
Added option to set the X-Frame-Options headers to main site
Added HSTS Preload header (thanks to Jamie)
0.7
Add report-uri
Fix handling of non-numeric blank strings for HPKP max-age
0.6
HPKP support
Check for TLS before emitting HSTS or HPKP headers
0.5
Change h2 for h1 for accessibility per #31650
0.4
License change
Clarify wording for XSS protection in readme
0.3
Prepare for release
0.2
Added Sonarqube file and formatting changes
0.1
- Initial release.