WordPress Security

  1. Security Headers
    1. Content Security Policy
      1. CSP Directive Configuration
        1. Nonce Implementation
          1. Hash-based CSP
            1. Report-Only Mode
            2. Transport Security Headers
              1. HSTS Configuration
                1. HSTS Preloading
                  1. Subdomain Inclusion
                  2. Frame Protection
                    1. X-Frame-Options
                      1. Clickjacking Prevention
                        1. Frame Ancestors Control
                        2. Content Type Protection
                          1. MIME Type Sniffing Prevention
                            1. Content Type Validation
                              1. XSS Protection Headers
                              2. Referrer Policy
                                1. Referrer Information Control
                                  1. Privacy Protection
                                    1. Cross-origin Requests

                                  Previous

                                  11. Web Application Firewall

                                  Go to top

                                  Next

                                  13. Monitoring and Logging