HTTP headers to improve web site security

Screenshots

This plug-in helps setting up the various header instructions included in the HTTP protocol allowing for simple improvement of your website security. This plug-in provides enabling of the following measures: HSTS (Strict-Transport-Security) CSP (Content-Security-Policy) Clickjacking mitigation (X-Frame-Options in main site) XSS protection (X-XSS-Protection) Disabling content sniffing (X-Content-Type-Options) Referrer policy Expect-CT Feature-Policy Remove PHP version information from the HTTP header Remove WordPress version information from the header securityheaders.com is a useful resource for evaluating your web site’s security. As usual, make sure to understand the meaning of these options and to run full tests on your web site as some options may result in some features stop working.