Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

HeaderGenie Security Headers

开发者 headergenie
更新时间 2026年10月1日 17:57
PHP版本: 8.0 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

security https headers scanner hsts

下载

1.2.28 1.2.36 1.2.35

详情介绍:

HeaderGenie Security Headers sends HTTP security headers from PHP, so they work on Apache, Nginx, and hosts that ignore .htaccess. You can: The scanner and headers work with no account and do not contact HeaderGenie servers. A separate HeaderGenie Pro plugin, sold at headergenie.com, adds CSP auto-add from scans and browser reports, Subresource Integrity, Compatibility checks, and cloud monitoring. That plugin is not included here and is not required. This plugin does not guarantee legal or compliance outcomes. It helps you set and review security headers.

安装:

  1. Upload the headergenie-security-headers folder to /wp-content/plugins/ or install from Plugins → Add Plugin.
  2. Activate HeaderGenie Security Headers.
  3. Open HeaderGenie in the admin menu.
  4. Run a scan, then enable the headers you want.

升级注意事项:

1.2.36 Permissions-Policy, COOP, COEP, CORP, and a manual CSP editor. 1.2.35 Additional CSP directives. 1.2.34 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.31 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.28 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.27 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.26 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.25 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.24 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.23 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.22 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.21 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.20 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.19 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.18 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.17 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.16 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.15 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.14 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.13 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.12 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.11 Renamed to HeaderGenie Security Headers for the WordPress.org listing. 1.2.10 Shared release with Pro, plus scanner and header hardening. 1.2.9 Shared release with Pro, plus scanner and header hardening. 1.2.8 Shared release with Pro, plus scanner and header hardening. 1.2.7 Shared release with Pro, plus scanner and header hardening. 1.2.5 Shared release with Pro, plus scanner and header hardening. 1.2.3 Shared release with Pro, plus scanner and header hardening. 1.2.1 Shared release with Pro, plus scanner and header hardening. 1.2.0 WordPress.org release with scanner and core security headers.

常见问题:

Does this plugin need an account?

No. Scanning and the included security headers work locally.

Does the plugin change .htaccess?

No. Headers are sent from PHP on front-end and login responses.

Will this break my site?

The default headers are conservative. They are not applied to wp-admin, AJAX, REST, or XML-RPC. Content-Security-Policy stays off until you enable it; a strict policy can block scripts or embeds if you omit required hosts.

Does this plugin phone home?

No. It only requests your own public site URL when you run a scan. Local development can set HEADER_GENIE_SCAN_URL in wp-config.php if the public URL is not reachable from PHP. It does not contact HeaderGenie servers.

What is HeaderGenie Pro?

A separate plugin from headergenie.com. Pro adds automatic CSP missing-source detection, Subresource Integrity, Compatibility checks, and cloud monitoring. It is optional and is not part of this download.

更新日志:

1.2.36 1.2.35 1.2.34 1.2.31 1.2.28 1.2.27 1.2.26 1.2.25 1.2.24 1.2.23 1.2.22 1.2.21 1.2.20 1.2.19 1.2.18 1.2.17 1.2.16 1.2.15 1.2.14 1.2.13 1.2.12 1.2.11 1.2.10 1.2.9 1.2.8 1.2.7 1.2.5 1.2.3 1.2.1 1.2.0