Blog Post

New Free Plugin: GD Security Headers

GD Security Headers is a brand new plugin available for free on WordPress.org that will help you setup HTTP security headers and receive reports when CSP and XXS Protection directives have been violated.

The plugin includes settings to configure various HTTP security related headers that can help protect the website and the website users from various types of cross site scripting attacks, manipulation of data and external files loaded by the website.

GD Security Headers: Dashboard with the headers and reports overview

All HTTP headers generated by the plugin can be added to each page generated by WordPress and it works with any web server, or, if you use Apache web server, all headers can be saved to HTACCESS file. The plugin currently supports following HTTP headers:

  • Content Security Policy (CSP) – editor for CSP rules, with automatic rules set up for popular Google services (Fonts, Adsense, Maps, Translations, Analytics) and the ability to log in reports from browsers when the policy has been violated
  • XSS Protection (XXP) – with the ability to log in reports from browsers when the policy has been violated
  • Content-Type – No Sniff Policy
  • Strict Transport Security
  • Referrer Policy
  • Frame Options
Example of headers added to .HTACCESS file

And, more security related headers will be added in the future versions. Plugin is available for free on WordPress.org, so check it out:

Let me know what you think about the new plugin, and if you have any questions or suggestions.

Please wait...
GD Security Headers WordPress Plugin
An easy way to add HTTP security headers to WordPress

Configure various security related HTTP headers, including Content Security Policy, Referrer Policy and more. All headers can be added to .HTACCESS file.

About the author

Milan Petrovic
Milan Petrovic

CEO and Lead developer of Dev4Press Web Development company, working with WordPress since 2008, first as a freelancer, later founding own development company. Author of more than 250 plugins and more than 20 themes.

Leave a Comment

Latest From The Blog

announcement upcoming development cycle changes

Upcoming development cycle changes

With all plugins getting updates last week, and everything that is going on with the security concerns with WordPress and PHP in the past months, the next wave of updates for all Dev4Press plugins will have more strict release changes.
announcement all plugins updated sdk

All plugins updated with new Freemius SDK

Freemius has released new SDK that fixes some potential security related issues, and all Dev4Press plugins now have been released with the updated SDK. Some plugins got some small changes and improvements as well.
plugins release forum toolbox for bbpress 8.0

forumToolbox for bbPress 8.0

We are thrilled to announce the official release of forumToolbox Pro 8.0! This release marks a major evolution, focusing on modernizing core workflows, stripping out legacy technical debt, and introducing new attachments upload interface reimagined from ground up.

0
0
123
0
0
0
0
0
0