Descripción
HTTP Headers gives your control over the http headers returned by your blog or website.
Headers supported by HTTP Headers includes:
- Access-Control-Allow-Origin
- Access-Control-Allow-Credentials
- Access-Control-Max-Age
- Access-Control-Allow-Methods
- Access-Control-Allow-Headers
- Access-Control-Expose-Headers
- Age
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- Cache-Control
- Clear-Site-Data
- Connection
- Content-Encoding
- Content-Type
- Cross-Origin-Embedder-Policy
- Cross-Origin-Opener-Policy
- Cross-Origin-Resource-Policy
- Expect-CT
- Expires
- Feature-Policy
- NEL
- Permissions-Policy
- Pragma
- P3P
- Referrer-Policy
- Report-To
- Strict-Transport-Security
- Timing-Allow-Origin
- Vary
- WWW-Authenticate
- X-Content-Type-Options
- X-DNS-Prefetch-Control
- X-Download-Options
- X-Frame-Options
- X-Permitted-Cross-Domain-Policies
- X-Powered-By
- X-Robots-Tag
- X-UA-Compatible
- X-XSS-Protection
Capturas
Instalación
Upload the HTTP Headers plugin to your blog. Then activate it.
That’s all.
FAQ
-
Why to use this plugin?
-
Nowadays security of your social data at the web is essential. This plugin helps you to improve your website overall security.
-
Who use these headers?
-
These HTTP headers are being used in production services by popular websites as Facebook, Google+, Twitter, LinkedIn, YouTube, Yahoo, Amazon, Instagram, Pinterest.
Reseñas
Colaboradores y desarrolladores
«HTTP Headers» es un software de código abierto. Las siguientes personas han colaborado con este plugin.
Colaboradores«HTTP Headers» ha sido traducido a 3 idiomas locales. Gracias a los traductores por sus contribuciones.
Traduce «HTTP Headers» a tu idioma.
¿Interesado en el desarrollo?
Revisa el código , echa un vistazo al repositorio SVN o suscríbete al registro de desarrollo por RSS.
Registro de cambios
1.19.1
Release Date – 2nd September, 2023
- Added «clientHints» directive to «Clear-Site-Data» header
- Added «credentialless» directive to «Cross-Origin-Embedder-Policy» header
1.19.0
Release Date – 7th July, 2023
- Fixed: SSRF vulnerability by an Admin user
- Fixed: XSS vulnerability by an Admin user
1.18.11
Release Date – 11th June, 2023
- Fixed: Remote Code Execution by an Admin user
1.18.10
Release Date – 28th May, 2023
- Fixed: Remote Code Execution by an Admin user
- Removed: Import/Export functions
1.18.9
Release Date – 23rd April, 2023
- Fixed: Remote Code Execution by an Admin user
1.18.8
Release Date – 17th April, 2023
- Fixed: SQL Injection by an Admin user
- Fixed: Remote Code Execution by an Admin user
- Few PHP 8.x compatible fixes
1.18.7
Release Date – 24th January, 2023
- Fix CSP default value
1.18.6
Release Date – 22nd January, 2023
- PHP 8 compatibility changes
1.18.5
Release Date – 30th April, 2021
- Configurable paths to files who store passwords for basic/digest auth
- Fixed issue with plugin activation, due missing file
1.18.4
Release Date – 30th April, 2021
- Initial value of X-Robots-Tag fixed
1.18.3
Release Date – 30th April, 2021
- Added «X-Robots-Tag» header
- Added «interest-cohort», «layout-animations», «legacy-image-formats», «oversized-images», and «wake-lock» directive to «Permissions-Policy» header
- Added «cross-origin» value to «Cross-Origin-Resource-Policy» header
- Added «navigate-to» and «prefetch-src» directives to «Content-Security-Policy» header
1.18.2
Release Date – 24th April, 2021
- Configurable paths to .htaccess and .user.ini files
1.18.1
Release Date – 29th October, 2020
- Added «allow-downloads» and «allow-top-navigation-by-user-activation» to «sandbox» directive, part of CSP
1.18.0
Release Date – 20th September, 2020
- Added «Permissions-Policy» header
- Fixed «Cookie Security»
1.17.0
Release Date – 26th July, 2020
- Added «Cross-Origin-Embedder-Policy» header
- Added «Cross-Origin-Opener-Policy» header
1.16.1
Release Date – 23rd July, 2020
- Fixed JS/CSS versioning
1.16.0
Release Date – 23rd July, 2020
- Added the «NEL» header
- Fixed the «Report-To» header
1.15.2
Release Date – 18th June, 2020
- Fixed a PHP Notice at «Expires» page
- Fixed comments in .user.ini file
1.15.1
Release Date – 9th May, 2020
- Fixed the «Access-Control-Allow-Origin» header
1.15.0
Release Date – 26th January, 2020
- Added the «Cross-Origin-Resource-Policy» header
- Removed the «Public-Key-Pins» header
1.14.2
Release Date – 25th November, 2019
- CORS headers updated (added «Vary: Origin»)
1.14.1
Release Date – 15th September, 2019
- Simple filtering was replaced with Dynamic filtering
1.14.0
Release Date – 1st September, 2019
- Added the «Content-Type» header
- Fixed the «Access-Control-Allow-Credentials» header
- Improvement to «Access-Control-Allow-Headers» header
- Improvement to «Access-Control-Allow-Methods» header
- Improvement to «Access-Control-Expose-Headers» header
- Improvement to «Cache-Control» header
- Improvement to «Vary» header
1.13.4
Release Date – 14th July, 2019
- Added the «always» condition to Header (unset) directive
- Fixed the «import» function
- Fixed the «Access-Control-Allow-Origin» header
1.13.3
Release Date – 16th June, 2019
- Bugfix in «WWW-Authenticate» header
- Added support of Apache 2.4
1.13.2
Release Date – 13th June, 2019
- Bugfix in «Content-Encoding» header
- Bugfix in «Vary» header
1.13.1
Release Date – 8th June, 2019
- Added Brotli compression
1.13.0
Release Date – 7th June, 2019
- Added «SameSite» to Cookie Security
- Fixed import/export function
- Code refactoring
1.12.2
Release Date – 5th April, 2019
- UI improvement for Content-Security-Policy
- Fix for Access-Control-Allow-Headers
- Fix for Access-Control-Allow-Origin
- Fix for Feature-Policy
1.12.1
Release Date – 9th January, 2019
- Remove direct calls to cURL
1.12.0
Release Date – 5th January, 2019
- Better handling of activate/deactivate functions
1.11.0
Release Date – 9th December, 2018
- Added support of «Clear-Site-Data» header
1.10.5
Release Date – 6th November, 2018
- Hotfix: parallel work with third-party plugins
1.10.4
Release Date – 30th September, 2018
- Support of following Server APIs: CGI, FastCGI, PHP-FPM
- Error handling improvement
1.10.3
Release Date – 8th August, 2018
- HSTS improvement
- CORS improvement
1.10.2
Release Date – 31st July, 2018
- Export feature bug-fixed
1.10.1
Release Date – 18th July, 2018
- Feature-Policy header update: new features added
1.10.0
Release Date – 17th July, 2018
- Added support of «Feature-Policy» header
1.9.5
Release Date – 12th July, 2018
- CORS bugfix
1.9.4
Release Date – 13th January, 2018
- In-plugin security improvement
1.9.3
Release Date – 10th January, 2018
- Bug fix
1.9.2
Release Date – 4th January, 2018
- Security improvements
1.9.1
Release Date – 27th December, 2017
- Updated translations
1.9.0
Release Date – 23th December, 2017
- Added support of «Report-To» header
- Added support of translations
- Added support of Import/Export
- Updated «Content-Security-Policy» header (added directives: object-src, frame-src, worker-src, manifest-src, base-uri, report-to)
- Updated «WWW-Authenticate» header (support multiple users)
- Updated «Access-Control» headers (added list of origins)
1.8.0
Release Date – 31st August, 2017
- Added support of «Timing-Allow-Origin» header
- Added support of «X-Download-Options» header
- Added support of «X-DNS-Prefetch-Control» header
- Added support of «X-Permitted-Cross-Domain-Policies» header
- Added support of Custom headers
1.7.1
Release Date – 18th August, 2017
- PHP notice bugfixed
1.7.0
Release Date – 15th August, 2017
- Added support of «Content-Security-Policy-Report-Only» header
- Added support of «Public-Key-Pins-Report-Only» header
- Added «1; report=» directive to the «X-XSS-Protection» header
- Added «Inspect headers» tool
- UI bugfixes
1.6.0
Release Date – 5th August, 2017
- Added support of «Expect-CT» header
1.5.0
Release Date – 30th July, 2017
- Added support of «Age» header
- Added support of «Cache-Control» header
- Added support of «Connection» header
- Added support of «Content-Encoding» header
- Added support of «Expires» header
- Added support of «Pragma» header
- Added support of «Vary» header
- Added support of «WWW-Authenticate» header
- Added support of «X-Powered-By» header
- Added support of «Secure» and «HttpOnly» cookies
1.4.0
Release Date – 5th July, 2017
- Added support of Apache (via htaccess) inclusion method
1.3.0
Release Date – 3rd June, 2017
- Added support of Content-Security-Policy header
- Added dashboard
1.2.0
Release Date – 28th April, 2017
- Added support of Referrer-Policy header
1.1.2
Release Date – 13th February, 2017
- Added support of ‘preload’ directive to HSTS header
1.1.1
Release Date – 8th November, 2016
- Fixed typo in the X-Frame-Options header
1.1.0
Release Date – 20th May, 2016
- Added support of P3P header
1.0.0
Release Date – 10th May, 2016
- Initial version