Navoto

<p>Swift PWA is a comprehensive WordPress plugin that transforms your website into a Progressive Web App (PWA) with enterprise-grade security features.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Security First</strong>: Comprehensive security fixes including file upload validation, SQL injection prevention, XSS protection, and CSRF protection</li>
<li><strong>Modern Workbox</strong>: Uses Workbox 7.0.0 with latest security patches and caching strategies</li>
<li><strong>Smart Caching</strong>: Intelligent caching for HTML, CSS, JS, images, and fonts</li>
<li><strong>Cache Management</strong>: Option to clear cache manually for better control</li>
<li><strong>Offline Support</strong>: Full offline functionality with customizable offline pages</li>
<li><strong>App Manifest</strong>: Automatic generation of web app manifest for app-like experience</li>
<li><strong>Service Worker</strong>: Advanced service worker with cache management</li>
<li><strong>Admin Interface</strong>: User-friendly WordPress admin interface</li>
<li><strong>File Upload Security</strong>: Secure file uploads with validation and size limits</li>
<li><strong>Rate Limiting</strong>: Built-in protection against abuse</li>
<li><strong>Access Control</strong>: Admin-only access with proper capability checks</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>File upload validation (PNG, JPG, GIF, WebP only)</li>
<li>2MB file size limits</li>
<li>MIME type validation</li>
<li>SQL injection prevention with prepared statements</li>
<li>XSS protection with proper output escaping</li>
<li>CSRF protection with nonce verification</li>
<li>Rate limiting on form submissions</li>
<li>Admin capability checks</li>
<li>Input sanitization and validation</li>
</ul>
<h4>PWA Features</h4>
<ul>
<li>Web App Manifest generation</li>
<li>Service Worker registration</li>
<li>Offline page support</li>
<li>App icons and splash screens</li>
<li>Theme and background colors</li>
<li>Display modes (standalone, fullscreen, etc.)</li>
<li>Orientation settings</li>
<li>Precache pages selection</li>
<li>Asset precaching</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>HTTPS (required for PWA functionality)</li>
<li>File upload permissions</li>
<li>Database write permissions</li>
</ul>
<h3>Support</h3>
<p>For support, please visit the <a href="https://wordpress.org/support/plugin/swift-pwa/" rel="ugc">WordPress.org support forums</a> or create an issue on the plugin’s GitHub repository.</p>
<h3>External Services</h3>
<p>This plugin connects to external services to provide Progressive Web App functionality. The following services are used:</p>
<h4>Google Workbox Library</h4>
<p>This plugin uses Google’s Workbox library to provide service worker functionality and caching strategies.</p>
<ul>
<li>
<p><strong>What it’s used for</strong>: Workbox is a JavaScript library that provides service worker functionality, including caching strategies, precaching, and offline support. It’s essential for the PWA features of this plugin.</p>
</li>
<li>
<p><strong>What data is sent and when</strong>: When a user visits your website, their browser automatically requests the Workbox library from Google’s servers (storage.googleapis.com). This request includes:</p>
<ul>
<li>The user’s IP address (standard HTTP request)</li>
<li>User-Agent string (browser information)</li>
<li>Referrer information (your website URL)</li>
<li>Standard HTTP headers</li>
</ul>
<p>This data is sent automatically by the browser when loading the Workbox library, which happens when the service worker is registered on the user’s device.</p>
</li>
<li>
<p><strong>Service provider</strong>: Google LLC</p>
<ul>
<li>Terms of Service: https://policies.google.com/terms</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
<li>Workbox Documentation: https://developers.google.com/web/tools/workbox</li>
</ul>
</li>
</ul>
<p><strong>Note</strong>: The Workbox library is loaded directly from Google’s servers. No personal data from your WordPress site is transmitted to Google. Only standard HTTP request data (IP address, browser information) is sent, which is standard for any web resource request.</p>
<h4>Google Fonts (Optional)</h4>
<p>If your website uses Google Fonts, the plugin’s service worker may cache these resources. This is an optional feature that only applies if you have Google Fonts on your site.</p>
<ul>
<li>
<p><strong>What it’s used for</strong>: Caching Google Fonts resources (fonts.googleapis.com and fonts.gstatic.com) for offline access and improved performance.</p>
</li>
<li>
<p><strong>What data is sent and when</strong>: If your site uses Google Fonts, standard HTTP requests are made to Google’s servers when fonts are loaded. This includes IP address and browser information, as with any web resource.</p>
</li>
<li>
<p><strong>Service provider</strong>: Google LLC</p>
<ul>
<li>Terms of Service: https://policies.google.com/terms</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
<li>Google Fonts Privacy: https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users</li>
</ul>
</li>
</ul>
<p><strong>Note</strong>: Google Fonts caching is only enabled if your website already uses Google Fonts. The plugin does not add Google Fonts to your site; it only caches them if they’re already present.</p>
<h3>Privacy Policy</h3>
<p>This plugin does not collect, store, or transmit any personal data from your WordPress installation. All configuration data remains on your WordPress server.</p>
<p>However, when users visit your website, their browsers will automatically connect to Google’s servers to load the Workbox library. This is a standard web resource request and follows Google’s privacy policy. No data from your WordPress database or user accounts is transmitted to external services.</p>
<h3>Credits</h3>
<ul>
<li>Workbox by Google – https://developers.google.com/web/tools/workbox</li>
<li>WordPress PWA community</li>
<li>Security researchers and contributors</li>
</ul>


Swift PWA

Transform your WordPress site into a Progressive Web App with comprehensive security features and modern caching strategies.

Ivan Kristianto

Yohan Totting

<p>This plugin’s goal is to improve your WordPress website experiences with <a href="https://developers.google.com/web/progressive-web-apps/" rel="nofollow ugc">Progressive Web App</a> enhancement. Right now it will cache your static assets like scripts, stylesheets, images, and fonts. It’s also boost your website loading performance especially on first time loading, and website with a lot of images. The main goal is to make sure your website not losing the user by make sure the website loading quickly. It’s integrated with <a href="https://www.ampproject.org/about/benefits/" rel="nofollow ugc">AMP page</a> and make your website start FAST with AMP but stay FAST after on your original website.</p>
<h3>Well Integrated with AMP Plugin</h3>
<p><a href="https://www.ampproject.org/about/benefits/" rel="nofollow ugc">AMP page</a> is very fast to load. But how to keep the fast experience on your website when user open non AMP pages. If your website open in AMP Page, this plugin will automatically prepare to boost performance of your non AMP pages by caching the static assets like JavaScripts and CSS, so it’s will ready once you access your non AMP pages. Then when user click the logo or go to your main website without AMP, those static assets will ready to serve without request to server anymore. Currently only work with <a href="https://wordpress.org/plugins/amp/" rel="ugc">Automattic AMP For WordPress</a> plugin only.</p>
<h3>Work Well With All Performance Plugin</h3>
<p>Add all static assets on precache settings like logo, CSS files, JavaScripts files, and fonts to precache list that your plugin generated to make sure it caches by service worker on loaded.</p>
<h3>Keep The Website Fast In All Pages</h3>
<p>On first time user open your website, it will cache all the static assets like JavaScripts, CSS, fonts, and images that needed by all pages in your website.  Then later when user navigate to other pages, this static assets will serve directly from browser caches and boost the page loading.</p>
<h3>Create Custom Offline Page</h3>
<p>You can set what page that you want to show when user access your web but they can’t access it due on offline condition. The page will shows up instead default browser offline page. You can give better experience or information to your users about what happen and ask them to comeback later.</p>
<h3>Only Load Images That Shows On Screen</h3>
<p>Images are nice to see on your website but will hurt performance if you have too many images in one page. On mobile, even these images not shows up on screen, its load and will slowing down the page loading performance. This plugin will detect the images that not shows up on screen and will not load it on first time you open the page. Later when you scroll the page, the plugin will detect if it’s getting close to screen and load the image and ready to show once it appear on screen.</p>
<h3>Credits</h3>
<p>I use some plugins as my references to develop this plugin. Please check their amazing works<br />
* <a href="https://wordpress.org/plugins/bj-lazy-load/" rel="ugc">BJ Lazy Load</a><br />
* <a href="https://wordpress.org/plugins/jetpack/" rel="ugc">Jetpack</a><br />
* <a href="https://wordpress.org/plugins/amp/" rel="ugc">Accelerated Mobile Pages – AMP</a><br />
* <a href="https://developers.google.com/web/tools/workbox/" rel="nofollow ugc">Workbox</a></p>


Minimum Configuration WordPress PWA

Add Progressive Web Apps (PWA) enhancement to your WordPress with minimum configuration. Preache your assets, and add offline page.

Swift PWA vs Minimum Configuration WordPress PWA