Powerful HTTP Security Headers with an Excellent CSP Builder

I’ve been looking for a lightweight way to add important HTTP security headers without editing server configuration, and this plugin does exactly that. The CSP builder is especially useful, and the Report-Only mode makes it easy to test policies before enforcing them. I also appreciate that the preset domains are only suggestions and no external services are contacted automatically. Simple, fast, well-designed, and a great addition for improving WordPress security.

• This topic was modified 7 hours, 50 minutes ago by Harsh Patel.