sandywp / plugins / http-headers
HTTP Headers
HTTP Headers adds CORS & security HTTP headers to your website.
Ready in seconds.
v1.19.5 50,000+ installs WP 3.2+ PHP 5.3+
What you get inside
4 screens-
This screenshot shows up the dashboard with categories of the supported headers.
-
This screenshot shows up the headers of a chosen category and their current values.
-
This screenshot shows up the settings page where you can adjust the security headers.
-
This screenshot shows up the response headers returned by the web server.
About this plugin
HTTP Headers gives your control over the http headers returned by your blog or website.
Headers supported by HTTP Headers includes:
- Access-Control-Allow-Origin
- Access-Control-Allow-Credentials
- Access-Control-Max-Age
- Access-Control-Allow-Methods
- Access-Control-Allow-Headers
- Access-Control-Expose-Headers
- Age
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- Cache-Control
- Clear-Site-Data
- Connection
- Content-Encoding
- Content-Type
- Cross-Origin-Embedder-Policy
- Cross-Origin-Opener-Policy
- Cross-Origin-Resource-Policy
- Expect-CT
- Expires
- Feature-Policy
- NEL
- Permissions-Policy
- Pragma
- P3P
- Referrer-Policy
- Report-To
- Strict-Transport-Security
- Timing-Allow-Origin
- Vary
- WWW-Authenticate
- X-Content-Type-Options
- X-DNS-Prefetch-Control
- X-Download-Options
- X-Frame-Options
- X-Permitted-Cross-Domain-Policies
- X-Powered-By
- X-Robots-Tag
- X-UA-Compatible
- X-XSS-Protection
Questions
- Why to use this plugin?
Nowadays security of your social data at the web is essential. This plugin helps you to improve your website overall security.
- Who use these headers?
These HTTP headers are being used in production services by popular websites as Facebook, Google+, Twitter, LinkedIn, YouTube, Yahoo, Amazon, Instagram, Pinterest.
Spin up a real WordPress site in seconds.
Test plugins, build a demo, hand a client a link — then squash it and start again. No local setup, no Docker.