Support » Plugin: Security Headers » wp-login.php
4 years, 4 months ago
As author it was noted in another forum the wp-login.php page doesn’t receive these headers as send_header or admin_init actions are not run.
The “fix” appears to be two line change duplicating admin_init steps for login_init.
I will add to next release.
Added to source code repository for 1.0 release.