Louis

<p>This WordPress Plugin add secure headers to you WordPress site.</p>
<p>The Following Headers are included:<br />
– Strict-Transport-Security: Enforces SSL if your website is using SSL (which it should be)<br />
– X-Frame-Options: Prevents Clickjacking<br />
– X-XSS-Protection: Prevents XSS attacks<br />
– X-Content-Type-Options: set to ‘nosniff to prevent MIME-type sniffing<br />
– Referrer-Policy: set to ‘no-referrer-when-downgrade’</p>
<ul>
<li>No setup required!</li>
</ul>


WP Secure HTTP Headers

License: GPLv2 or later WordPress plugin to add secure headers to your website.

Nick C

<p>The GNU Terry Pratchett plugin transmits an “X-Clacks-Overhead” header reading, “GNU Terry Pratchett” so that Terry’s name is whispered forevermore in the Internet’s “overhead”.</p>
<p>In Pratchett’s “Going Postal”, workers who die in the line of duty have their names transmitted up and down the Discworld’s telegraph system as a tribute.</p>
<p>This plugin makes it easy for WordPress users to do the same for Terry Pratchett, without having to modify their server configuration.</p>
<h4>The GNU Terry Pratchett headers</h4>
<p>The plugin adds the GNU Terry Pratchett header in two ways:</p>
<ol>
<li>As an HTTP header (if you don’t use a WordPress page caching plugin).</li>
<li>As a meta tag in your HTML with the http-equiv attribute.</li>
</ol>
<h4>Settings</h4>
<p>The text sent in HTTP headers and meta tags is “GNU Terry Pratchett” by default.</p>
<p>Change this by visiting Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> GNU Terry Pratchett in your WordPress admin area and editing the “X-Clacks-Overhead header” field.</p>
<p>This option lets you honor other people you would like to remember by making them a small part of your site’s content forever.</p>
<h4>Checking the HTTP header is sent</h4>
<p>There are several ways to check that the HTTP header is appearing for your site:</p>
<ol>
<li>With your terminal (<code>curl -I example.com</code>)</li>
<li>With Chrome’s Network tab.</li>
<li>With the <a href="https://chrome.google.com/webstore/detail/clacks-overhead-gnu-terry/lnndfmobdoobjfcalkmfojmanbeoegab" rel="nofollow ugc">Clacks Overhead</a> Chrome plugin or the <a href="https://addons.mozilla.org/en-US/firefox/addon/gnu_terry_pratchett/" rel="nofollow ugc">GNU Terry Pratchett Firefox extension</a>.</li>
<li>Using the <a href="http://tools.seobook.com/server-header-checker/" rel="nofollow ugc">Server Header Checker</a>.</li>
</ol>
<p>Note that the HTTP header is not sent if you use a page caching plugin. To send the HTTP header and continue to use a caching plugin, add the header at the server level. See http://www.gnuterrypratchett.com/ for options.</p>
<h4>Checking the meta tag is added</h4>
<p>You can check that the meta tag is visible by viewing your site’s HTML source and searching for “GNU Terry Pratchett”.</p>
<p>The <a href="https://chrome.google.com/webstore/detail/clacks-overhead-gnu-terry/lnndfmobdoobjfcalkmfojmanbeoegab" rel="nofollow ugc">Clacks Overhead plugin</a> for Chrome and the <a href="https://addons.mozilla.org/en-US/firefox/addon/gnu_terry_pratchett/" rel="nofollow ugc">GNU Terry Pratchett extension</a> for Firefox both light up when they detect the HTML meta tag or HTTP header.</p>
<h4>Credits and contributions</h4>
<p>Inspired by <a href="http://www.reddit.com/r/bestof/comments/2yyop7/rdiscworld_redditors_with_web_servers_start/" rel="nofollow ugc">this reddit post</a>, <a href="http://boingboing.net/2015/03/15/sending-terry-pratchett-home-w.html" rel="nofollow ugc">boingboing’s report</a>, and the <a href="http://www.gnuterrypratchett.com/" rel="nofollow ugc">GNU Terry Pratchett</a> website.</p>
<p>Contributions welcome at the <a href="https://github.com/nickcernis/gnu-terry-pratchett" rel="nofollow ugc">GitHub repo</a>.</p>


GNU Terry Pratchett

Add an X-Clacks-Overhead header with “GNU Terry Pratchett” to all non-admin pages.

WP Secure HTTP Headers vs GNU Terry Pratchett