http-headers

http-headers copied to clipboard

Hi Thanks a lot for your WordPress HTTP Headers plugin. Can you please give us a basic setting for the CSP implentation ? if I follow the recomendations from https://infosec.mozilla.org/guidelines/web_security#content-security-policy...

pulsarinformatique

When using Nginx, this plugin does not write headers to `nginx.conf.` It only works for `.htaccess.` Would it be possible to support Nginx or do I need to switch to...

nimo23

Add ws: and wss: schemes

1

These schemes are used by connect-src. References: https://content-security-policy.com/connect-src/ (Search for WebSocket) https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#scheme-source https://developer.mozilla.org/en-US/docs/Web/URI/Schemes

dannyweldon

- FIX: `( ! ) Warning: Undefined array key "HTTP_ACCEPT_ENCODING" in /xxx/http-headers/http-headers.php on line 583` - FIX: `( ! ) Deprecated: substr_count(): Passing null to parameter 1 ($haystack) of type...

DSGND