Skip to content

Instantly share code, notes, and snippets.

@dipakcg
Created September 21, 2020 11:56
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dipakcg/c29bac968166ad708514d976d71e7c5c to your computer and use it in GitHub Desktop.
Save dipakcg/c29bac968166ad708514d976d71e7c5c to your computer and use it in GitHub Desktop.
HTTP Security Headers (WordPress)
<IfModule mod_headers.c>
Header set X-XSS-Protection "1; mode=block"
Header always append X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment