Title: Fix It Easy Security Headers Author: WP Fix It - WordPress Experts Published: 24 augustus 2025 Last modified: 24 augustus 2025 --- Plugins zoeken ![](https://ps.w.org/fix-it-easy-security-headers/assets/banner-772x250.png?rev= 3349315) Deze plugin **is niet getest met de laatste drie grote versies van WordPress**. Mogelijk wordt het niet meer onderhouden of ondersteund. Er kunnen ook compatibiliteitsproblemen ontstaan wanneer het wordt gebruikt met recentere versies van WordPress. ![](https://ps.w.org/fix-it-easy-security-headers/assets/icon-256x256.gif?rev=3349315) # Fix It Easy Security Headers Door [WP Fix It – WordPress Experts](https://profiles.wordpress.org/wpfixit/) [Download](https://downloads.wordpress.org/plugin/fix-it-easy-security-headers.1.1.zip) * [Details](https://nl-be.wordpress.org/plugins/fix-it-easy-security-headers/#description) * [Beoordelingen](https://nl-be.wordpress.org/plugins/fix-it-easy-security-headers/#reviews) * [Installatie](https://nl-be.wordpress.org/plugins/fix-it-easy-security-headers/#installation) * [Ontwikkeling](https://nl-be.wordpress.org/plugins/fix-it-easy-security-headers/#developers) [Ondersteuning](https://wordpress.org/support/plugin/fix-it-easy-security-headers/) ## Beschrijving **WP Fix It Easy Security Headers** adds a simple page under **Tools Security Headers** where you can toggle common HTTP security headers: * **Strict-Transport-Security (HSTS)** * **Content-Security-Policy (CSP)** * **X-Frame-Options** * **X-Content-Type-Options** * **Referrer-Policy** * **Permissions-Policy** On activation, all headers are **enabled by default** and you’re redirected to the settings screen. For convenience, the page and the Plugins screen include a **“Check Headers”** button that opens SecurityHeaders.com with your site’s URL prefilled (built dynamically from `home_url()`). ### Notes on CSP This plugin ships with a **permissive** default CSP intended to “work everywhere” out of the box (allows most external sources and inline code). For stronger protection, you should harden the directives for your specific site. ### Key Features * One-click toggles for popular headers * Dynamic “Check Headers” scan link * Uses the WordPress Settings API (nonce + capability checks) * Output escaping and sanitization following PHPCS ## Schermafbeeldingen [⌊Settings screen with header toggles and “Check Headers” button.⌉⌊Settings screen with header toggles and “Check Headers” button.⌉[ Settings screen with header toggles and “Check Headers” button. ## Installatie 1. Upload the plugin folder to `/wp-content/plugins/fix-it-easy-security-headers/` or install via Plugins Add New. 2. Activate the plugin. 3. You’ll be redirected to **Tools Security Headers**. Review and adjust toggles as needed. 4. (Optional) Click **Check Headers** to verify your headers on SecurityHeaders.com. ## FAQ ### Where do I manage the settings? Go to **Tools Security Headers**. ### What happens on activation? All header options are enabled and you’re redirected once to the settings page. ### Will this break my site? Most headers are safe defaults. The provided CSP is intentionally permissive; it shouldn’t block assets. For strict CSPs, tailor directives to your stack and test. ### Can I use this on multisite? Yes. The “Check Headers” URL is derived from `home_url()`. Activation redirect is skipped for network/bulk activations. ### Why don’t I see a “Settings saved” notice twice? The page prints only this plugin’s scoped settings messages to avoid duplicate notices. ### Can I customize the CSP? Yes. You can modify the `$csp` string in `security_headers_add_headers()` to fit your site’s needs. ## Beoordelingen Er zijn geen beoordelingen voor deze plugin. ## Bijdragers & ontwikkelaars “Fix It Easy Security Headers” is open source software. De volgende personen hebben bijgedragen aan deze plugin. Bijdragers * [ WP Fix It – WordPress Experts ](https://profiles.wordpress.org/wpfixit/) [Vertaal “Fix It Easy Security Headers” naar jouw taal.](https://translate.wordpress.org/projects/wp-plugins/fix-it-easy-security-headers) ### Interesse in de ontwikkeling? [Bekijk de code](https://plugins.trac.wordpress.org/browser/fix-it-easy-security-headers/), haal de [SVN repository](https://plugins.svn.wordpress.org/fix-it-easy-security-headers/) op, of abonneer je op het [ontwikkellog](https://plugins.trac.wordpress.org/log/fix-it-easy-security-headers/) via [RSS](https://plugins.trac.wordpress.org/log/fix-it-easy-security-headers/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1 * Initial release. * Header toggles for HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer- Policy, Permissions-Policy. * Activation enables all options and redirects to settings. * Dynamic SecurityHeaders.com scan link. ## Meta * Versie **1.1** * Laatst bijgewerkt: **1 jaar geleden** * Actieve installaties: **10+** * WordPress versie ** 5.8 of nieuwer ** * Getest t/m **6.8.10** * PHP versie ** 7.4 of nieuwer ** * Taal * [English (US)](https://wordpress.org/plugins/fix-it-easy-security-headers/) * Tags * [csp](https://nl-be.wordpress.org/plugins/tags/csp/)[headers](https://nl-be.wordpress.org/plugins/tags/headers/) [hsts](https://nl-be.wordpress.org/plugins/tags/hsts/)[security](https://nl-be.wordpress.org/plugins/tags/security/) * [Geavanceerde weergave](https://nl-be.wordpress.org/plugins/fix-it-easy-security-headers/advanced/) ## Beoordelingen Er zijn nog geen beoordelingen ingediend. [Je beoordeling](https://wordpress.org/support/plugin/fix-it-easy-security-headers/reviews/#new-post) [Bekijk alle beoordelingen](https://wordpress.org/support/plugin/fix-it-easy-security-headers/reviews/) ## Bijdragers * [ WP Fix It – WordPress Experts ](https://profiles.wordpress.org/wpfixit/) ## Ondersteuning Iets te melden? Hulp nodig? [Het supportforum bekijken](https://wordpress.org/support/plugin/fix-it-easy-security-headers/) ## Doneren Wil je de groei van deze plugin ondersteunen? [ Doneer aan deze plugin ](https://www.wpfixit.com)