• Resolved Blair Geddes

    (@primalspace)


    Does this plugin address all of the 4 settings for header?

    a. X-Content-Type-Options
    b. Content-Security-Policy
    c. X-Xss-Protection
    d. Strict Transport Security Header missing

Viewing 1 replies (of 1 total)
  • Plugin Author SimonRWaters

    (@simonrwaters)

    The plug-in doesn’t try and address Content-Security-Policy, as this would require adjustments for themes and plug-ins, and be difficult to manage for unskilled users.

    The other headers are covered. Ideas on how to do CSP without bewildering people welcomed.

Viewing 1 replies (of 1 total)
  • The topic ‘Headers Supported’ is closed to new replies.