Title: Fix It Easy Security Headers
Author: WP Fix It - WordPress Experts
Published: <strong>24. august, 2025</strong>
Last modified: 24. august, 2025

---

Søk i utvidelser

![](https://ps.w.org/fix-it-easy-security-headers/assets/banner-772x250.png?rev=
3349315)

Denne utvidelsen **har ikke blitt testet mot noen av de siste 3 hovedutgivelsene
av WordPress**. Den er kanskje ikke lenger holdt vedlike eller støttet, og den kan
ha kompatibilitetsproblemer med nyeste versjoner av WordPress.

![](https://ps.w.org/fix-it-easy-security-headers/assets/icon-256x256.gif?rev=3349315)

# Fix It Easy Security Headers

 Av [WP Fix It – WordPress Experts](https://profiles.wordpress.org/wpfixit/)

[Last ned](https://downloads.wordpress.org/plugin/fix-it-easy-security-headers.1.1.zip)

 * [Detaljer](https://nb.wordpress.org/plugins/fix-it-easy-security-headers/#description)
 * [Omtaler](https://nb.wordpress.org/plugins/fix-it-easy-security-headers/#reviews)
 *  [Installering](https://nb.wordpress.org/plugins/fix-it-easy-security-headers/#installation)
 * [Utvikling](https://nb.wordpress.org/plugins/fix-it-easy-security-headers/#developers)

 [Brukerstøtte](https://wordpress.org/support/plugin/fix-it-easy-security-headers/)

## Beskrivelse

**WP Fix It Easy Security Headers** adds a simple page under **Tools  Security Headers**
where you can toggle common HTTP security headers:

 * **Strict-Transport-Security (HSTS)**
 * **Content-Security-Policy (CSP)**
 * **X-Frame-Options**
 * **X-Content-Type-Options**
 * **Referrer-Policy**
 * **Permissions-Policy**

On activation, all headers are **enabled by default** and you’re redirected to the
settings screen.

For convenience, the page and the Plugins screen include a **“Check Headers”** button
that opens SecurityHeaders.com with your site’s URL prefilled (built dynamically
from `home_url()`).

### Notes on CSP

This plugin ships with a **permissive** default CSP intended to “work everywhere”
out of the box (allows most external sources and inline code). For stronger protection,
you should harden the directives for your specific site.

### Key Features

 * One-click toggles for popular headers
 * Dynamic “Check Headers” scan link
 * Uses the WordPress Settings API (nonce + capability checks)
 * Output escaping and sanitization following PHPCS

## Skjermbilder

[⌊Settings screen with header toggles and “Check Headers” button.⌉⌊Settings screen
with header toggles and “Check Headers” button.⌉[

Settings screen with header toggles and “Check Headers” button.

## Installasjon

 1. Upload the plugin folder to `/wp-content/plugins/fix-it-easy-security-headers/`
    or install via Plugins  Add New.
 2. Activate the plugin.
 3. You’ll be redirected to **Tools  Security Headers**. Review and adjust toggles 
    as needed.
 4. (Optional) Click **Check Headers** to verify your headers on SecurityHeaders.com.

## Ofte stilte spørsmål

### Where do I manage the settings?

Go to **Tools  Security Headers**.

### What happens on activation?

All header options are enabled and you’re redirected once to the settings page.

### Will this break my site?

Most headers are safe defaults. The provided CSP is intentionally permissive; it
shouldn’t block assets. For strict CSPs, tailor directives to your stack and test.

### Can I use this on multisite?

Yes. The “Check Headers” URL is derived from `home_url()`. Activation redirect is
skipped for network/bulk activations.

### Why don’t I see a “Settings saved” notice twice?

The page prints only this plugin’s scoped settings messages to avoid duplicate notices.

### Can I customize the CSP?

Yes. You can modify the `$csp` string in `security_headers_add_headers()` to fit
your site’s needs.

## Vurderinger

Det er ingen omtaler av denne utvidelsen.

## Bidragsytere og utviklere

«Fix It Easy Security Headers» er programvare med åpen kildekode. Følgende personer
har bidratt til denne utvidelsen:

Bidragsytere

 *   [ WP Fix It – WordPress Experts ](https://profiles.wordpress.org/wpfixit/)

[Oversett «Fix It Easy Security Headers» til ditt språk.](https://translate.wordpress.org/projects/wp-plugins/fix-it-easy-security-headers)

### Interessert i utvikling?

[Bla gjennom koden](https://plugins.trac.wordpress.org/browser/fix-it-easy-security-headers/),
sjekk ut [SVN-repositoriet](https://plugins.svn.wordpress.org/fix-it-easy-security-headers/),
eller abonner på [utviklingsloggen](https://plugins.trac.wordpress.org/log/fix-it-easy-security-headers/)
med [RSS](https://plugins.trac.wordpress.org/log/fix-it-easy-security-headers/?limit=100&mode=stop_on_copy&format=rss).

## Endringslogg

#### 1.1

 * Initial release.
 * Header toggles for HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-
   Policy, Permissions-Policy.
 * Activation enables all options and redirects to settings.
 * Dynamic SecurityHeaders.com scan link.

## Meta

 *  Versjon **1.1**
 *  Sist oppdatert **1 år siden**
 *  Aktive installasjoner **10+**
 *  WordPress-versjon ** 5.8 eller nyere **
 *  Testet opp til **6.8.10**
 *  PHP-versjon ** 7.4 eller nyere **
 *  Språk
 * [English (US)](https://wordpress.org/plugins/fix-it-easy-security-headers/)
 * Stikkord
 * [csp](https://nb.wordpress.org/plugins/tags/csp/)[headers](https://nb.wordpress.org/plugins/tags/headers/)
   [hsts](https://nb.wordpress.org/plugins/tags/hsts/)[security](https://nb.wordpress.org/plugins/tags/security/)
 *  [Avansert visning](https://nb.wordpress.org/plugins/fix-it-easy-security-headers/advanced/)

## Vurderinger

Ingen omtaler er sendt inn ennå.

[Din omtale](https://wordpress.org/support/plugin/fix-it-easy-security-headers/reviews/#new-post)

[Se alle omtalene](https://wordpress.org/support/plugin/fix-it-easy-security-headers/reviews/)

## Bidragsytere

 *   [ WP Fix It – WordPress Experts ](https://profiles.wordpress.org/wpfixit/)

## Brukerstøtte

Har du noe å si? Trenger du hjelp?

 [Vis brukerstøtteforumet](https://wordpress.org/support/plugin/fix-it-easy-security-headers/)

## Donér

Vil du støtte videreutviklingen av denne utvidelsen?

 [ Doner til denne utvidelsen ](https://www.wpfixit.com)