Weston Ruter

Felix Arntz

Google

As <a href="https://developers.google.com/web/updates/2018/06/feature-policy" rel="nofollow ugc">noted on the Google Developers blog</a>:
<blockquote>
Feature Policy allows web developers to selectively enable, disable, and modify the behavior of certain APIs and web features in the browser. It’s like CSP but instead of controlling security, it controls features!
The feature policies themselves are little opt-in agreements between developer and browser that can help foster our goals of building (and maintaining) high quality web apps.
</blockquote>
This plugin provides an API for sending the <code>Feature-Policy</code> response headers, as well as an admin interface for deciding which policy to apply for each feature.
As the Feature Policy specification is still evolving and at an early stage, the plugin reflects that and is currently an experimental prototype, to demonstrate how Feature Policy can be used in WordPress.
<h4>Did you know?</h4>
The Feature Policy specification will integrate with the new Reporting API specification. There is a <a href="https://wordpress.org/plugins/reporting-api/" rel="ugc">WordPress plugin for that specification</a> as well.

Feature Policy

WordPress plugin for managing feature policy headers.

Rik Lewis

bettersecurity

This plugin does not make any changes to your server configuration, such as the .htaccess file, but instead sends the headers as part of the WordPress page response. The reason for this is that many of them are not valid for assets such as stylesheets and images, but are sent anyway if the server configuration method is used.
Unlike many security plugins, these headers are also sent for your admin panel, where security is arguably the most important.
Headers that can be set include… 
* Feature-Policy 
* Referrer-Policy 
* Strict-Transport-Security 
* X-Frame-Options 
* X-Content-Type-Options 
* X-XSS-Protection 
* X-Permitted-Cross-Domain-Policies 
* Expect-CT

Better Headers


Perfect for my needs, allows me to easily add response headers which improves the security of my website.


Perfect for my needs

Improve the security of your website by easily setting HTTP response headers to enable browser protection

Feature Policy vs Better Headers