| 1 |
<?php include(GDSIH_PATH.'forms/about/minor.php'); ?> |
| 2 |
|
| 3 |
<div class="d4p-about-whatsnew"> |
| 4 |
<div class="d4p-whatsnew-section d4p-whatsnew-heading"> |
| 5 |
<div class="d4p-layout-grid"> |
| 6 |
<div class="d4p-layout-unit whole align-center"> |
| 7 |
<h2>HTTP Security Headers</h2> |
| 8 |
<p class="lead-description"> |
| 9 |
Add them to WordPress website, the easy way |
| 10 |
</p> |
| 11 |
<p> |
| 12 |
A new plugin that can add various HTTP Security Headers to WordPress powered website, with reports logging capabilities (for CSP and XXP) and support for .htaccess |
| 13 |
</p> |
| 14 |
</div> |
| 15 |
</div> |
| 16 |
</div> |
| 17 |
|
| 18 |
<div class="d4p-whatsnew-section"> |
| 19 |
<div class="d4p-layout-grid"> |
| 20 |
<div class="d4p-layout-unit half align-left"> |
| 21 |
<h3>Content Security Policy</h3> |
| 22 |
<p> |
| 23 |
The most important HTTP header that can limit what content browser will load and display, preventing various types of attacks like cross-site scripting and data injection. It also includes reporting feature allowing browsers to report back which URL and CSP rule was violating the content policy. |
| 24 |
</p> |
| 25 |
</div> |
| 26 |
<div class="d4p-layout-unit half align-left"> |
| 27 |
<h3>X-XSS Protection</h3> |
| 28 |
<p> |
| 29 |
Very simple HTTP header for protecting against a wide range of cross-site scripting attacks configured to block all attempts. It also has the reporting feature for browsers to report which URL and what request body was used to attempt the XSS attack (only some browsers can report on this for now). |
| 30 |
</p> |
| 31 |
</div> |
| 32 |
</div> |
| 33 |
</div> |
| 34 |
|
| 35 |
<div class="d4p-whatsnew-section"> |
| 36 |
<div class="d4p-layout-grid"> |
| 37 |
<div class="d4p-layout-unit half align-left"> |
| 38 |
<h3>More Security Headers</h3> |
| 39 |
<p> |
| 40 |
And, there are more HTTP security headers plugin can apply, including Content-Type Options, Strict Transport Security, Frame Option (if you use CSP, you don't need this one) and Referrer Policy. |
| 41 |
</p> |
| 42 |
</div> |
| 43 |
<div class="d4p-layout-unit half align-left"> |
| 44 |
<h3>Support for .HTACCESS</h3> |
| 45 |
<p> |
| 46 |
If you use Apache server, the plugin can build and add all the HTTP headers into .HTACCESS file. This way, headers will be applied to all files coming from your website, not just WordPress generated pages. |
| 47 |
</p> |
| 48 |
</div> |
| 49 |
</div> |
| 50 |
</div> |
| 51 |
</div> |
| 52 |
|
