Security Headers helps site owners manage modern browser security headers from inside WordPress. Features include: Admin settings page under Security Headers HSTS controls with preload warning Referrer-Policy and X-Frame-Options settings Permissions-Policy custom value field Minimal enforced CSP with upgrade-insecure-requests, separate from advanced source restrictions Content-Security-Policy builder with Report-Only mode Discover / Review / Enforce workflow with explicit source approvals and policy verification Untrusted source suggestions from page HTML and browser CSP reports Saved pre-work...
Read the full description on WordPress.org →
