HttpHeader 1.0.7

This is the seventh patch release of the HttpHeader Plugin.

Changelog

• Append optional style and script hashes for script-src and style-src
• Add the csp directive 'frame-ancestors' when the x-frame-options option is enabled
• Make sure csp headers are not added to the server config file as they are not static
• make sure only headers marked as both are added to the serverconfig files.

Features

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.6

This is the sixth patch release of the HttpHeader Plugin.

Changelog

• Write static headers to to the server config file
• Add it-IT Translation (Thanks @jeckodevelopment #13)

Features

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.5

This is the fifth patch release of the HttpHeader Plugin.

Changelog

• Add fr-FR Translation (Thanks @YGomiero #5)

Feature

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.4

This is the fourth patch release of the HttpHeader Plugin.

Changelog

• Add nl-NL Translation (Thanks @pe7er #4)

Feature

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.3

This is the third patch release of the HttpHeader Plugin.

Changelog

• Correct the HSTS max-age information generation (thanks for the report @SniperSister)

Feature

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy (new!)

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.2

This is the second patch release of the HttpHeader Plugin.

Changelog

• Add the possibility to configure a Feature-Policy more infos. (#3 thanks @SniperSister)

Feature

This plugin allows you to set all security http headers using a Joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT
• Feature-Policy (new!)

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.1

This is the first patch release of the HttpHeader Plugin.

Changelog

• Add the possibility to configure the HSTS Header using the Plugin UI. (Based on the great work by @degobbis)
• Add the possibility to configure the CSP Header using the Plugin UI. (Based on the great work by @degobbis)
• The commit: f76d76e is included here too.

Feature

This plugin allows you to set all security http headers using a joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy

HttpHeader 1.0.0

This is the initial release of the HttpHeader Plugin

Feature

This plugin allows you to set all security http headers using a joomla plugin:

• Strict-Transport-Security
• Content-Security-Policy
• Content-Security-Policy-Report-Only
• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy
• Expect-CT

This plugin also comes with some easy defaults for:

• X-Frame-Options
• X-XSS-Protection
• X-Content-Type-Options
• Referrer-Policy