WP Manifestindependent plugin directory
manifest / security / easy-csp-headers

Easy CSP Headers

Add CSP headers to any WordPress site

by Paul Faulkner · github.com/headwalluk/easy-csp-headers · website

★ 0stars
25release downloads
v1.1.0latest · 9mo ago

Install

Download easy-csp-headers.zip From the v1.1.0 release on GitHub, Jan 29, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/headwalluk/easy-csp-headers/releases/download/v1.1.0/easy-csp-headers.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/headwalluk/easy-csp-headers ↗

A WordPress plugin that automatically generates and injects Content Security Policy (CSP) headers with nonces for enhanced security.

Features

  • ✅ Automatic Nonce Generation - Unique nonce for every page load
  • ✅ HTML Processing - Uses WordPress WP_HTML_Tag_Processor for safe, fast HTML manipulation
  • ✅ Strict-Dynamic Support - Modern CSP with automatic script trust propagation
  • ✅ Report-Only Mode - Test CSP without breaking your site
  • ✅ Flexible Configuration - Granular control via settings page
  • ✅ Cache-Friendly - Works seamlessly with page caching plugins
  • ✅ WordPress Standards - Follows WordPress Coding Standards

How It Works

  1. Captures Output - Hooks into template_redirect and starts output buffering
  2. Generates Nonce - Creates a cryptographically secure nonce
  3. Processes HTML - Adds nonce attributes to `

Releases

1 release. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.1.0 latest
Jan 29, 2026 9mo ago
easy-csp-headers.zip +1 asset
25
easy-csp-headers.zip24
easy-csp-headers-1.1.0.zip1