feat: HTTP security headers manager #124

Open
opened 2026-06-02 14:31:20 +00:00 by jmiller · 1 comment
Owner

Summary

Configurable HTTP security headers in firewall plugin.

Headers

  • X-Frame-Options (DENY / SAMEORIGIN)
  • X-Content-Type-Options (nosniff)
  • X-XSS-Protection
  • Strict-Transport-Security (HSTS)
  • Content-Security-Policy (configurable directives)
  • Referrer-Policy
  • Permissions-Policy
  • Cross-Origin-Opener-Policy
  • Cross-Origin-Resource-Policy
  • Remove/customise X-Powered-By
  • Remove/customise generator meta tag

Each header toggle-able with custom value field in plugin params.

## Summary Configurable HTTP security headers in firewall plugin. ## Headers - [ ] X-Frame-Options (DENY / SAMEORIGIN) - [ ] X-Content-Type-Options (nosniff) - [ ] X-XSS-Protection - [ ] Strict-Transport-Security (HSTS) - [ ] Content-Security-Policy (configurable directives) - [ ] Referrer-Policy - [ ] Permissions-Policy - [ ] Cross-Origin-Opener-Policy - [ ] Cross-Origin-Resource-Policy - [ ] Remove/customise X-Powered-By - [ ] Remove/customise generator meta tag Each header toggle-able with custom value field in plugin params.
jmiller added the joomlaphp labels 2026-06-02 14:31:20 +00:00
Author
Owner

Branch created: feature/124-feat-http-security-headers-manager

git fetch origin
git checkout feature/124-feat-http-security-headers-manager
Branch created: [`feature/124-feat-http-security-headers-manager`](https://git.mokoconsulting.tech/MokoConsulting/MokoWaaS/src/branch/feature/124-feat-http-security-headers-manager) ```bash git fetch origin git checkout feature/124-feat-http-security-headers-manager ```
Sign in to join this conversation.
No labels joomla php
Type Feature
Status
Priority High
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: MokoConsulting/MokoWaaS#124