Security9 min read
WordPress security headers: what to set and how to test them
Add WordPress security headers at the web server or CDN when you can, then test them before enforcing a strict policy. HSTS and CSP can cause outages if you apply them blindly, so start conservatively, use CSP Report-Only first, and verify cached as well as uncached responses.
- WordPress
- Security
- HTTP Headers