Title: Security Headers & Caching Author: Studio Be4 Published: 2023년 6월 15일 Last modified: 2025년 10월 8일 --- 플러그인 검색 ![](https://ps.w.org/security-headers-caching/assets/banner-772x250.png?rev=2926642) ![](https://ps.w.org/security-headers-caching/assets/icon.svg?rev=2926662) # Security Headers & Caching 작성자: [Studio Be4](https://profiles.wordpress.org/studiobe4/) [다운로드](https://downloads.wordpress.org/plugin/security-headers-caching.7.4.zip) * [세부사항](https://ko.wordpress.org/plugins/security-headers-caching/#description) * [평가](https://ko.wordpress.org/plugins/security-headers-caching/#reviews) * [설치](https://ko.wordpress.org/plugins/security-headers-caching/#installation) * [개발](https://ko.wordpress.org/plugins/security-headers-caching/#developers) [지원](https://wordpress.org/support/plugin/security-headers-caching/) ## 설명 Security Headers & Caching is a comprehensive WordPress plugin that helps protect your website by implementing essential HTTP security headers and optimizing performance through intelligent caching mechanisms. Compatible with all hosting providers including Aruba, SiteGround, Bluehost, and more. #### Key Features * **Easy Configuration** – Simple admin interface to enable/disable security headers * **Multiple Security Headers** – Comprehensive security header support * **Smart Caching** – Configurable cache duration for better performance * **Universal Compatibility** – Works with all hosting providers * **No Conflicts** – Compatible with popular security and caching plugins * **Translation Ready** – Full internationalization support #### Security Headers Included * **X-Powered-By** – Removes server technology information to prevent targeted attacks * **Content-Security-Policy (CSP)** – Controls which resources can be loaded to prevent XSS attacks * **Strict-Transport-Security (HSTS)** – Forces HTTPS connections for enhanced security * **X-XSS-Protection** – Enables XSS filtering in older browsers * **X-Frame-Options** – Prevents clickjacking attacks by controlling iframe embedding * **X-Content-Type-Options** – Prevents MIME type sniffing * **Referrer-Policy** – Controls how much referrer information is shared * **Permissions-Policy** – Controls browser features and APIs #### Caching Features * Configurable cache duration (seconds) * Automatic cache headers management * Compatible with CDN services * No conflict with existing cache plugins #### Why Security Headers Matter Security headers are HTTP response headers that tell your browser how to behave when handling your website’s content. They help protect against: * Cross-Site Scripting (XSS) attacks * Clickjacking attempts * Code injection attacks * MIME type sniffing * Protocol downgrade attacks * And much more… #### Developer Friendly The plugin provides filters for developers to customize headers: * `shc_security_headers` – Filter to modify security headers array #### Test Your Security After installing and configuring the plugin, test your site’s security at: * [Security Headers](https://securityheaders.com/)* [Mozilla Observatory](https://observatory.mozilla.org/) #### Privacy This plugin does not collect, store, or transmit any user data. It only modifies HTTP response headers sent by your server. ### Developer Documentation #### Filters **shc_security_headers** Modify the security headers before they are sent. ``` add_filter( 'shc_security_headers', function( $headers ) { // Add custom header $headers['X-Custom-Header'] = 'custom-value'; // Modify existing header $headers['X-Frame-Options'] = 'DENY'; return $headers; } ); ``` #### Constants * `SHC_VERSION` – Plugin version number * `SHC_PLUGIN_DIR` – Plugin directory path * `SHC_PLUGIN_URL` – Plugin directory URL * `SHC_PLUGIN_BASENAME` – Plugin basename ### Support For support, feature requests, or bug reports, please visit: * [Plugin Website](https://www.studiobe4.it) ### Credits Developed by [Studio Be4](https://www.studiobe4.it) – Web Design & Development Agency ### License This plugin is licensed under the GPLv2 or later. ## 스크린샷 [⌊Main settings page with all security header options⌉⌊Main settings page with all security header options⌉[ Main settings page with all security header options [⌊Easy-to-use interface with helpful descriptions⌉⌊Easy-to-use interface with helpful descriptions⌉[ Easy-to-use interface with helpful descriptions [⌊Cache configuration options⌉⌊Cache configuration options⌉[ Cache configuration options ## 설치 #### Automatic Installation 1. Log in to your WordPress admin panel 2. Navigate to Plugins Add New 3. Search for “Security Headers & Caching” 4. Click “Install Now” and then “Activate” #### Manual Installation 1. Download the plugin ZIP file 2. Log in to your WordPress admin panel 3. Navigate to Plugins Add New Upload Plugin 4. Select the downloaded ZIP file and click “Install Now” 5. Activate the plugin #### Configuration 1. After activation, navigate to **Security Headers** in your WordPress admin menu 2. Enable the security headers you want to use 3. Configure the Content Security Policy and other settings as needed 4. Set cache duration if desired (recommended: 3600 seconds for 1 hour) 5. Click “Save Settings” 6. Test your configuration at [securityheaders.com](https://securityheaders.com/) ## FAQ ### Will this plugin slow down my website? No, security headers are lightweight HTTP headers that add negligible overhead. The caching feature actually improves performance. ### Is this compatible with my hosting provider? Yes! This plugin is designed to work with all hosting providers including Aruba, SiteGround, Bluehost, WP Engine, and others. Unlike the previous version, it uses WordPress core hooks that work universally. ### Can I use this with other security plugins? Yes, Security Headers & Caching is designed to work alongside other security plugins. It focuses specifically on HTTP headers. ### Will this break my site? The default settings are conservative and should work for most sites. However, strict Content Security Policy settings can affect sites using inline scripts or external resources. Test thoroughly after configuring. ### What is HSTS and should I enable it? HSTS (HTTP Strict Transport Security) forces browsers to use HTTPS. Only enable this if your site has a valid SSL certificate and is fully accessible via HTTPS. ### How do I know if it’s working? Visit [securityheaders.com](https://securityheaders.com/), enter your website URL, and check your security grade. You should see improvements after activating the plugin. ### Can I customize the headers? Yes! Developers can use the `shc_security_headers` filter to modify headers programmatically. See the plugin documentation for examples. ### What happens to my settings if I deactivate the plugin? Your settings are preserved in the database. If you uninstall (delete) the plugin, all settings are automatically removed. ### Does this plugin work with WordPress multisite? Yes, the plugin is fully compatible with WordPress multisite installations. ### I’m getting a lower score on securityheaders.com, why? Security headers need to be configured based on your site’s specific needs. A strict CSP policy may require listing all external resources. Adjust settings based on your requirements. ## 후기 이 플러그인에 대한 평가가 없습니다. ## 기여자 & 개발자 “Security Headers & Caching”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ Studio Be4 ](https://profiles.wordpress.org/studiobe4/) [자국어로 “Security Headers & Caching”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/security-headers-caching) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/security-headers-caching/) 는, [SVN 저장소](https://plugins.svn.wordpress.org/security-headers-caching/)를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/security-headers-caching/) 을 [RSS](https://plugins.trac.wordpress.org/log/security-headers-caching/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 #### 7.3 (2025-01-08) * Complete rewrite from version 7.2 * Fixed: Headers now work on all hosting providers (not just Aruba) * Fixed: Proper use of WordPress hooks (send_headers instead of init) * Fixed: Added proper CSRF protection with nonce verification * Fixed: All inputs properly sanitized and validated * Fixed: Checkbox values correctly handled * Fixed: Cache duration field now shows saved values * Added: Individual toggles for each security header * Added: Full internationalization support * Added: Proper WordPress Settings API integration * Added: Professional admin interface with helpful descriptions * Added: Settings link on plugins page * Added: Automatic cleanup on uninstall * Added: Multisite support * Added: Developer filters for customization * Added: Comprehensive documentation * Improved: Code organization with separate classes * Improved: Security with capability checks * Improved: Compatibility with all hosting environments * Improved: User experience with better UI/UX ## 기초 * 버전 **7.4** * 최근 업데이트: **10개월 전** * 활성화된 설치 **30+** * 워드프레스 버전 ** 5.9 또는 그 이상 ** * 다음까지 시험됨: **6.8.8** * PHP 버전 ** 7.2 또는 그 이상 ** * 언어 * [English (US)](https://wordpress.org/plugins/security-headers-caching/) * 태그: * [cache](https://ko.wordpress.org/plugins/tags/cache/)[csp](https://ko.wordpress.org/plugins/tags/csp/) [headers](https://ko.wordpress.org/plugins/tags/headers/)[hsts](https://ko.wordpress.org/plugins/tags/hsts/) [security](https://ko.wordpress.org/plugins/tags/security/) * [고급 보기](https://ko.wordpress.org/plugins/security-headers-caching/advanced/) ## 평점 아직 제출된 리뷰가 없습니다. [Your review](https://wordpress.org/support/plugin/security-headers-caching/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/security-headers-caching/reviews/) ## 기여자 * [ Studio Be4 ](https://profiles.wordpress.org/studiobe4/) ## 지원 할 말 있으신가요? 도움이 필요하신가요? [지원 포럼 보기](https://wordpress.org/support/plugin/security-headers-caching/)