
內容簡介
HeaderGenie Security Headers 是一款用於增強網站安全性的外掛,透過 PHP 發送 HTTP 安全標頭,適用於 Apache、Nginx 及不支援 .htaccess 的主機。它能幫助使用者檢查和配置網站的安全標頭,提升網站防護能力。
【主要功能】
• 掃描網站以檢查安全標頭的存在與弱點
• 啟用多種安全標頭如 X-Content-Type-Options 和 HSTS
• 自行配置內容安全政策(CSP)
• 從 wp-admin 管理安全設定
• 無需帳戶即可使用掃描功能
外掛標籤
開發者團隊
② 後台搜尋「HeaderGenie Security Headers」→ 直接安裝(推薦)
原文外掛簡介
HeaderGenie Security Headers sends HTTP security headers from PHP, so they work on Apache, Nginx, and hosts that ignore .htaccess.
You can:
Scan the public site and see which security headers are present, weak, or missing
Enable headers such as X-Content-Type-Options, X-Frame-Options, Referrer-Policy, DNS prefetch control, HSTS on HTTPS, Permissions-Policy, COOP, COEP, and CORP
Configure a Content-Security-Policy yourself (report-only or enforce). Hosts are not added automatically
Manage those settings from HeaderGenie in wp-admin
The scanner and headers work with no account and do not contact HeaderGenie servers.
A separate HeaderGenie Pro plugin, sold at headergenie.com, adds CSP auto-add from scans and browser reports, Subresource Integrity, Compatibility checks, and cloud monitoring. That plugin is not included here and is not required.
This plugin does not guarantee legal or compliance outcomes. It helps you set and review security headers.
Privacy
This plugin does not contact HeaderGenie servers and does not require an account. A scan requests your own public site URL from the WordPress server so it can read response headers. No analytics, license checks, or third-party tracking run in this plugin.
