Security Headers & Caching for WordPress

Permissions-Policy – Controls browser features and APIs

Caching Features

Configurable cache duration (seconds)

Automatic cache headers management

Compatible with CDN services

No conflict with existing cache plugins

Why Security Headers Matter Security headers are HTTP response headers that tell your browser how to behave when handling your website’s content. They help protect against:

Cross-Site Scripting (XSS) attacks

Clickjacking attempts

Code injection attacks

MIME type sniffing

Protocol downgrade attacks

And much more…

Developer Friendly The plugin provides filters for developers to customize headers:

shc_security_headers – Filter to modify security headers array

Test Your Security After installing and configuring the plugin, test your site’s security at:

* Security Headers

* Mozilla Observatory

Privacy This plugin does not collect, store, or transmit any user data. It only modifies HTTP response headers sent by your server.

Developer Documentation Filters shc_security_headers

Modify the security headers before they are sent.

add_filter( 'shc_security_headers', function( $headers ) { // Add custom header $headers['X-Custom-Header'] = 'custom-value';

// Modify existing header $headers['X-Frame-Options'] = 'DENY';

return $headers; } );

Constants

SHC_VERSION – Plugin version number

SHC_PLUGIN_DIR – Plugin directory path

SHC_PLUGIN_URL – Plugin directory URL

SHC_PLUGIN_BASENAME – Plugin basename

Support For support, feature requests, or bug reports, please visit:

* Plugin Website

Credits Developed by Studio Be4 – Web Design & Development Agency

License This plugin is licensed under the GPLv2 or later.