Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

Do Not Iframe My Wordpress Site

This simple anticlickjacking script prevents your site from being clickjacked, following the owasp best practice using the Best-for-now Legacy Browser Frame Breaking Script.

Adds an HTTP header and OWASP's legacy browser frame breaking script to prevent clickjacking.