Vishwa

vishvega

<p>HeaderShield adds a conservative set of security headers that improve browser protection without breaking most sites. It also provides optional strict cross-origin protections for sites that are ready for them.</p>
<p>Default headers include:</p>
<ul>
<li>X-Frame-Options</li>
<li>X-Content-Type-Options</li>
<li>X-XSS-Protection (legacy)</li>
<li>Referrer-Policy</li>
<li>Permissions-Policy</li>
<li>Content-Security-Policy (upgrade-insecure-requests)</li>
<li>Strict-Transport-Security (HTTPS only)</li>
</ul>
<p>Strict Mode can additionally enable COEP, COOP, and CORP for stronger isolation, but may break third‑party scripts or embeds. Use with care and test on staging first.</p>
<h4>Source code for third-party assets</h4>
<p>The admin UI uses SlimSelect for the multi-select dropdown. Human-readable source is included in the plugin:</p>
<ul>
<li>JavaScript: <code>assets/js/slimselect.js</code> (minified build: <code>assets/js/slimselect.min.js</code>)</li>
<li>CSS: <code>assets/css/slimselect.css</code> (minified build: <code>assets/css/slimselect.min.css</code>)</li>
</ul>
<p>Upstream project: https://github.com/brianvoe/slim-select (MIT). This plugin does not use a custom build process; the included files are from the published release.</p>


HeaderShield

Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.

timpet

<p>It adds HSTS headers to your wordpress site.</p>
<p>No configuration required</p>
<h3>Arbitrary section</h3>
<p>You may provide arbitrary sections, in the same format as the ones above.  This may be of use for extremely complicated<br />
plugins where more information needs to be conveyed that doesn’t fit into the categories of “description” or<br />
“installation.”  Arbitrary sections will be shown below the built-in sections outlined above.</p>
<h3>A brief Markdown Example</h3>


HSTS strict-preload

It adds HSTS headers to your wordpress site. No configuration required

HeaderShield vs HSTS strict-preload