Title: BoundaryGuard Headers Author: Jay Suthar Published: Декабрь 29, 2025-ж. Last modified: Январь 5, 2026-ж. --- Плагиндерди издөө ![](https://ps.w.org/boundaryguard-headers/assets/banner-772x250.png?rev=3428818) ![](https://ps.w.org/boundaryguard-headers/assets/icon-256x256.png?rev=3428818) # BoundaryGuard Headers Автору [Jay Suthar](https://profiles.wordpress.org/jsjack74/) [Жүктөө](https://downloads.wordpress.org/plugin/boundaryguard-headers.1.0.0.zip) * [Кенен маалымат](https://ky.wordpress.org/plugins/boundaryguard-headers/#description) * [Сын-пикирлер](https://ky.wordpress.org/plugins/boundaryguard-headers/#reviews) * [Орнотуу](https://ky.wordpress.org/plugins/boundaryguard-headers/#installation) * [Development](https://ky.wordpress.org/plugins/boundaryguard-headers/#developers) [Колдоо](https://wordpress.org/support/plugin/boundaryguard-headers/) ## Сүрөттөө BoundaryGuard Headers enforces modern HTTP security headers to harden your WordPress site against XSS, clickjacking, mixed content, and cross-origin attacks. **Key Features:** * **Essential Protection:** Adds X-Frame-Options, X-Content-Type-Options, Referrer- Policy, and Permissions-Policy to reduce attack surface and prevent clickjacking. * **HSTS (Strict Transport Security):** Forces HTTPS connections to help prevent protocol downgrade and man-in-the-middle attacks. * **Advanced Isolation (COOP/COEP):** Enables Cross-Origin-Opener-Policy and Cross- Origin-Embedder-Policy to improve cross-origin isolation and mitigate certain side-channel attacks. * **Content Security Policy (CSP):** One of the strongest defenses against XSS. Includes a dashboard-based CSP builder with preset options to whitelist trusted sources for scripts, styles, images, and more. * **CSP Report-Only Mode:** Test your policy safely without blocking content. * **Server Header Hardening:** Removes or limits exposure of headers such as `X- Powered-By` and `Server`. * **Lightweight and Fast:** Uses PHP headers for broad server compatibility and minimal performance impact. * **No `.htaccess` Editing Required:** Works without modifying server configuration files. Designed for developers and site owners who want stronger security without unnecessary complexity. ### External Services This plugin provides a Content Security Policy (CSP) builder. To assist users, it includes “Preset Buttons” that allow users to quickly add domain names to their own CSP whitelist. **This plugin DOES NOT connect to, load data from, or send data to these services automatically.** The following third-party domains are referenced as presets within the admin dashboard for whitelisting purposes: * Google Analytics (www.google-analytics. com) – Used for tracking whitelisting. [Privacy: https://policies.google.com/privacy]* Google Tag Manager (www.googletagmanager.com) – Used for tag management. [Privacy: https://policies.google.com/privacy] * Stripe (js.stripe.com, api.stripe.com) – Used for payment processing. [Privacy: https://stripe.com/privacy] * Facebook (www. facebook.com, connect.facebook.net) – Used for social embeds. [Privacy: https:// www.facebook.com/policy.php] * YouTube (www.youtube.com, i.ytimg.com) – Used for video embeds. [Privacy: https://policies.google.com/privacy] * Vimeo (player.vimeo. com) – Used for video embeds. [Privacy: https://vimeo.com/privacy] * Gravatar (secure. gravatar.com) – Used for user avatars. [Privacy: https://automattic.com/privacy/] ## Орнотуу 1. Upload the `boundaryguard-headers` folder to the `/wp-content/plugins/` directory. 2. Activate the plugin through the **Plugins** menu in WordPress. 3. Configure the settings from **Settings BoundaryGuard Headers**. ## FAQ.KG ### Does this plugin edit .htaccess? No. BoundaryGuard Headers uses PHP headers, which improves compatibility across different hosting environments. ### Can I test Content Security Policy without breaking my site? Yes. The plugin includes a **CSP Report-Only Mode** that allows you to monitor policy violations without blocking any resources. ### Will this affect site performance? No. The plugin is lightweight and adds negligible overhead, as headers are sent as part of the normal HTTP response. ## Сын-пикирлер There are no reviews for this plugin. ## Contributors & Developers “BoundaryGuard Headers” is open source software. The following people have contributed to this plugin. Мүчөлөрү * [ Jay Suthar ](https://profiles.wordpress.org/jsjack74/) [Translate “BoundaryGuard Headers” into your language.](https://translate.wordpress.org/projects/wp-plugins/boundaryguard-headers) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/boundaryguard-headers/), check out the [SVN repository](https://plugins.svn.wordpress.org/boundaryguard-headers/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/boundaryguard-headers/) by [RSS](https://plugins.trac.wordpress.org/log/boundaryguard-headers/?limit=100&mode=stop_on_copy&format=rss). ## Өзгөртүүлөр #### 1.0.0 * Initial release * Added essential HTTP security headers * Implemented HSTS support * Added CSP builder with report-only mode ## Мета * Нуска **1.0.0** * Акыркы жаңыртуу **7 ай мурун** * Активдүү орнотуулар **10+** * WordPress нускасы ** 6.0 же андан жогору ** * Tested up to **6.9.6** * PHP нускасы ** 7.4 же андан жогору ** * Тил * [English (US)](https://wordpress.org/plugins/boundaryguard-headers/) * Тег: * [csp](https://ky.wordpress.org/plugins/tags/csp/)[hsts](https://ky.wordpress.org/plugins/tags/hsts/) [http-headers](https://ky.wordpress.org/plugins/tags/http-headers/)[security](https://ky.wordpress.org/plugins/tags/security/) [xss](https://ky.wordpress.org/plugins/tags/xss/) * [Advanced View](https://ky.wordpress.org/plugins/boundaryguard-headers/advanced/) ## Рейтинг Азырынча эч кандай сын-пикир жок. [Your review](https://wordpress.org/support/plugin/boundaryguard-headers/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/boundaryguard-headers/reviews/) ## Мүчөлөрү * [ Jay Suthar ](https://profiles.wordpress.org/jsjack74/) ## Колдоо Комментарийлер барбы? Жардам керекпи? [Колдоо форумун көрүү](https://wordpress.org/support/plugin/boundaryguard-headers/)