ATR Cookie Notice vs Secure HTTP Headers

ATR Cookie Notice is a powerful and user-friendly cookie consent management plugin designed to help WordPress websites align with the Israeli Privacy Protection Law (PPL), including Amendment 13, and related privacy best practices. The plugin provides a customizable cookie banner with granular consent options for different types of cookies. Key Features Israel Privacy Law Aligned – Oriented to Israel’s Privacy Protection Law (PPL), including Amendment 13 Granular Cookie Control – Separate consent options for Essential, Analytics, and Marketing cookies Customizable Design – Full control over colors, positioning, and styling with WordPress color pickers Live Preview – Real-time floating preview that updates as you customize settings Customizable Content – Full control over banner text, buttons, and footer HTML with token support Multiple Banner Positions – Bottom, top, or overlay positioning options Auto-hide Functionality – Optional automatic banner dismissal Responsive Design – Works perfectly on all devices and screen sizes RTL Support – Proper right-to-left language support Multilingual Support – Built-in Hebrew and English translations Developer Friendly – Extensive hooks and filters for customization Privacy Policy Integration – Built-in privacy policy management with customizable footer Cookie Expiry Management – Configurable consent duration Debug Mode – Development tools for testing and troubleshooting Consent Modes – Choose between Full (blocking non-essential until consent) and Simple (informational only) Tools – One-click “Purge caches and refresh assets” with cache busting, styling reset to defaults Cookie Categories The plugin manages three main cookie categories: Essential Cookies – Always enabled, required for basic website functionality Analytics Cookies – Optional, for website analytics and performance monitoring Marketing Cookies – Optional, for advertising and marketing purposes Customization Options Visual Customization – WordPress color pickers for primary color, text color, background color with live preview Position Control – Choose from bottom, top, or center overlay positioning Behavior Settings – Auto-hide delay, cookie expiry duration Custom CSS – Add your own styling rules Default States – Set default consent states for each cookie category Content Customization – Customize banner text, buttons, and footer HTML with token support ({site_name}, {privacy_url}, {privacy_link}) Styling Presets – Light, Dark, Minimal, High Contrast presets for quick setup Privacy & Compliance Consent Management – Proper consent tracking and storage Privacy Policy – Built-in privacy policy templates in Hebrew and English Data Protection – Secure handling of user consent data Regulatory Alignment – Oriented to Israel’s Privacy Protection Law (PPL), including Amendment 13 (not legal advice) Developer Features WordPress Coding Standards – Follows WPCS and best practices Extensive Hooks – Customize behavior with WordPress actions and filters Clean Code – Well-documented, maintainable codebase Performance Optimized – Minimal impact on site performance Perfect for businesses, agencies, and developers who need a reliable cookie consent solution aligned with Israeli privacy law that can be easily customized to match any website design. Liability Statement This plugin is provided “as is” without warranties of any kind, express or implied. It is intended to help site owners align cookie consent UX and behavior with Israel’s Privacy Protection Law (including Amendment 13). It does not constitute legal advice, nor does it guarantee compliance. You are solely responsible for verifying your legal obligations and configuring the plugin to meet your specific requirements. The author and contributors are not liable for any damages, losses, or non-compliance resulting from the use of this plugin.

Harden your web applications. HTTP header fields are components of the header section of request and response messages. The headers define the operating parameters of an HTTP transaction. Securing HTTP headers will improve the resilience of your web application against many common attacks including those that are on the OWASP top 10 list. Securing headers can also improve your SEO rank and in addition to preventing websites from being marked as dangerous by browsers and antivirus applications. Protect sensitive user information and be compliant with privacy regulations. Defend users from stealing private data by protecting website cookies. Use the proper directive such as “secure”, “httponly” and “samesite”, all of those will be applied automatically by “Secure HTTP Headers” plugin. Secure HTTP Headers will automatically analyze any website and will build up secure headers directives, by the latest best practice. In addition, Secure HTTP Headers offers fully configurable options, apply or skip any header directive as needed. Install and activate Secure HTTP Headers with full confidence, the deactivation of this plugin will return your website header directives to their original state. Main plugin functionality HTTP Strict Transport Security – helps to protect websites against man-in-the-middle attacks and cookie hijacking X-Frame-Options – helps to protect users against ClickJacking attacks X-Content-Type-Options – helps to prevent the browser from MIME-sniffing Referrer-Policy – helps to control how much referrer information should be included with requests Clear-Site-Data – helps to ensure that data is deleted from the browser if the user logs out X-Download-Options – helps to control how IE 8 will handle downloaded HTML files Access-Control-Allow-Origin – helps to ensure whether the response can be shared with requesting code from the given origin Cross-Origin-Embedder-Policy – helps to prevent a document from loading any cross-origin resources that don’t explicitly grant the document permission Permissions-Policy – helps to allow and deny the use of browser features in its own frame, and in content within any iframe elements in the document Cross-Origin-Opener-Policy – helps to protect websites against a set of cross-origin attacks dubbed XS-Leaks Cross-Origin-Resource-Policy – helps to protect websites against speculative side-channel attacks, like Spectre, as well as Cross-Site Script Inclusion attacks X-Permitted-Cross-Domain-Policies – helps to control how cross-domain requests from Flash and PDF documents are handled Cookie Http-Only flag – helps to protect websites against Cross-Site Scripting, or XSS attacks Cookie Secure flag – helps to ensure that cookie is sent over a secure connection Cookie Samesite Lax flag – helps to protect websites against CSRF and XSSI attacks Expect-CT – helps to prevent the use of misissued certificates for a website. Note: The Expect-CT will likely become obsolete in June 2021 What are the optional extras? Magnisec is offering “Secure HTTP Headers enhanced” A plugin that contains, in addition, an engine that watches and builds in any website changes a CSP – Content Security Policy that is best practice and recommended by all professional securities experts, that mitigate XSS -Cross site Scripting, one of the most common and destructive attacks. Price: 50$ /year for a domain. More details and installation here