توضیحات
EssentialHeaders is a focused WordPress plugin that attaches the HTTP security headers browsers expect, so protection is not left to chance or buried in server config.
Under Settings EssentialHeaders you get three tabs:
- Headers — overview of which headers are enabled and will be sent
- Settings — toggles and editable values for each header
- About — plugin info
Headers covered:
- Content-Security-Policy (CSP)
- Strict-Transport-Security (HSTS)
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
Safer headers ship enabled with sensible defaults. CSP starts off so you can adopt it deliberately. Headers apply to public site responses (pages, feeds, and the login screen)—not wp-admin, AJAX, REST, GraphQL, JSON API, or XML-RPC. HSTS is only sent over HTTPS. Default HSTS uses max-age only; add includeSubDomains yourself when every subdomain is ready.
نصب
- Upload the
essentialheadersfolder to the/wp-content/plugins/directory. - Activate the plugin through the Plugins menu in WordPress.
- Open Settings EssentialHeaders to review and configure headers.
سوالات متداول
-
Will this break my site?
-
The default set is conservative. Content-Security-Policy is off by default because a strict CSP can block scripts or styles your theme needs. Enable CSP when you are ready to tune it.
-
Does HSTS work on HTTP?
-
No. Strict-Transport-Security is only sent when the visitor reaches the site over HTTPS.
-
Does the login screen get these headers?
-
Yes. The login screen is treated as a public response. wp-admin, AJAX, REST, GraphQL, JSON API, and XML-RPC are excluded so dashboards and APIs are not broken by a strict CSP.
-
Does this change site content?
-
No. The plugin only stores its own options and adds HTTP response headers on public responses.
نقد و بررسیها
نقد و بررسیای برای این افزونه یافت نشد.
توسعه دهندگان و همکاران
“EssentialHeaders” نرم افزار متن باز است. افراد زیر در این افزونه مشارکت کردهاند.
مشارکت کنندگان
ترجمه “EssentialHeaders” به زبان شما.
علاقه مند به توسعه هستید؟
کد را مرور کنید، مخزن SVN را بررسی کنید، یا از طریق RSS در گزارش توسعه مشترک شوید.
گزارش تغییرات
1.0.0
- Initial release.