Market

csp header

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

42 / 42 rows with source links

100.0% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

0 rows with no attached evidence

0 rows have source counts but still need direct links.

Themes

All themes

No clustered themes yet.

Competitors

1 shown

HTTP Headers 50.0K installs · 4.3

weak incumbent

-100.0%momentum 55.1weakness 29/23pain/praise

Pain still appears around missing feature, bugs despite praise for quality, value.

source 1 source 2

Evidence

Open evidence explorer

complaint How to set up Content Security Policy?

How to set up Content Security Policy?: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Headers · How to set up Content Security Policy? complaint Include HSTS support for fixed files like .css

Include HSTS support for fixed files like .css: users show security, compatibility, missing feature pain that may indicate a product gap.

HTTP Headers · Include HSTS support for fixed files like .css Hello, all – I’m trying to figure out why HSTS is only applied to .php and .HTML files. complaint Site broken after setting CSP

Site broken after setting CSP: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Headers · Site broken after setting CSP Hi, I just installed HTTP Headers for the first time. complaint HTTP security headers

HTTP security headers: users show security, support, setup pain that may indicate a product gap.

HTTP Headers · HTTP security headers Hi, According to securityheaders.com I see the following: View post on imgur.com I installed the plugin HTTP Headers and switched on HSTS although it’s orange which is weird. complaint Can’t do anything

Can’t do anything: users show bugs, missing feature, support pain that may indicate a product gap.

HTTP Headers · Can’t do anything Try saving any setting (even without changing anything) and just get a critical error. complaint CTO

CTO: users show security, setup pain that may indicate a product gap.

HTTP Headers · CTO I’m curious, I installed the plugin and went to the CTO and changed it to no sniff. complaint Crashed my site

Crashed my site: users show bugs, missing feature pain that may indicate a product gap.

HTTP Headers · Crashed my site Not sure what’s up with this, but every single save I made crashed my site. complaint No longer works. Enabling ANYTHING causes fatal error

No longer works. Enabling ANYTHING causes fatal error: users show bugs, missing feature pain that may indicate a product gap.

HTTP Headers · No longer works. complaint Critical security vulnerability

Users flagged a critical HTTP Headers vulnerability and one update briefly caused blank dashboard pages before another release addressed the issue.

HTTP Headers · There is a critical security vulnerability that needs urgent patching praise effective plugin – save the x-content-type

effective plugin – save the x-content-type: users show security, bugs, compatibility pain that may indicate a product gap.

HTTP Headers · effective plugin – save the x-content-type I am finding this a very effective tool to help clients reach security compliance. complaint XSS Issue reported by PatchStack

A user asked whether a Patchstack-reported stored XSS vulnerability in HTTP Headers was being fixed before they switched plugins.

HTTP Headers · it would be great to know if it’s being fixed, otherwise we need to look for an alternative plugin praise an exceptional plugin – needs updating

an exceptional plugin – needs updating: users show security, bugs, compatibility pain that may indicate a product gap.

HTTP Headers · an exceptional plugin – needs updating I have felt this has been excellent since the first time I used it, and absolutely no issues with it for what it is, except that there are a couple of headers that either need to be ‘marked deprecated’ or just removed. complaint Updating to latest version creates infinite redirect loop

A plugin update caused an infinite redirect loop that blocked wp-admin until the developer released a fix.

HTTP Headers · wp-admin console does not load due to redirect loop praise Love this, but …

Love this, but …: users show security, missing feature, support pain that may indicate a product gap.

HTTP Headers · Love this, but … I love this one. praise Nice Job! Thank you.

Nice Job! Thank you.: users show security, missing feature, support pain that may indicate a product gap.

HTTP Headers · This plugin is really nice, and makes setting headers for security and other concerns easy and transparent. complaint status=ERR&code=101

A confirmed HTTP Headers bug redirected administrators away from the WordPress updates screen until a fixed version was released.

HTTP Headers · wp-admin/update-core.php becomes unreachable praise Marvelous Tool for various Security Header settings

Marvelous Tool for various Security Header settings: users show security, missing feature, migration pain that may indicate a product gap.

HTTP Headers · Marvelous Tool for various Security Header settings Great tool. praise Awesome plugin for security and speed

Awesome plugin for security and speed: users show security, performance, missing feature pain that may indicate a product gap.

HTTP Headers · Awesome plugin for security and speed I want to thank you for your awesome contribution of this plugin. neutral headers not updating

headers not updating: users show security, missing feature, support pain that may indicate a product gap.

HTTP Headers · headers not updating Installed the plug-in on my standalone site. praise Love It

Love It: users show security, support pain that may indicate a product gap.

HTTP Headers · Love It Helped me to add security headers to my site! praise Nice!

Nice!: users show bugs, compatibility pain that may indicate a product gap.

HTTP Headers · I use this plugin on many of my sites, and I have never encountered fatal error errors as in the comments. praise Easy to use and almost perfect

Easy to use and almost perfect: users show security, missing feature pain that may indicate a product gap.

HTTP Headers · Easy to use and almost perfect Went through a bunch of options of adding security headers to my sites and settled on this plugin. praise www auth broken

www auth broken: users show bugs pain that may indicate a product gap.

HTTP Headers · www auth broken Works fine, but be careful with the realm in WWW-Authenticate! complaint Make Main and sub-domain site down

A reviewer blamed the plugin for taking main and subdomain sites down, though later comments point to Cloudflare DNS removal as the actual cause.

HTTP Headers · the security settings make my main site and all sub-domain sites down praise Good plugin.

Good plugin.: users show security pain that may indicate a product gap.

HTTP Headers · Enhances the security of a WordPress site. praise Simple Solution to a Complex Problem

Simple Solution to a Complex Problem: users show security pain that may indicate a product gap.

HTTP Headers · Simple Solution to a Complex Problem I’ve been researching lots of information to improve my security and giving myself a headache. complaint plugin in Multisite network

plugin in Multisite network: users show missing feature, support, migration pain that may indicate a product gap.

HTTP Headers · I was suprized that (as far as I can see) the plugin has to be configured for each site separately. complaint E_ERROR was caused in line 1559 of the file http-headers.php

E_ERROR was caused in line 1559 of the file http-headers.php: users show bugs, compatibility, missing feature pain that may indicate a product gap.

HTTP Headers · E_ERROR was caused in line 1559 of the file http-headers.php I received this error notice: An error of type E_ERROR was caused in line 1559 of the file http-headers.php. complaint Doesn’t work with NGINX

Doesn’t work with NGINX: users show compatibility, missing feature, support pain that may indicate a product gap.

HTTP Headers · Doesn’t work with NGINX So, the plugin documentation doesn’t do enough to communicate to a new user HOW it controls the HTTP response headers. complaint Recommended Settings for Permissions-Policy

Recommended Settings for Permissions-Policy: users show missing feature, support, setup pain that may indicate a product gap.

HTTP Headers · Recommended Settings for Permissions-Policy The tittle says all. complaint Added custom headers to add content type for images and the website broke

Added custom headers to add content type for images and the website broke: users show bugs, support, setup pain that may indicate a product gap.

HTTP Headers · Added custom headers to add content type for images and the website broke Hello Community, I installed the HTTP Headers plugin and then wanted to add custom headers to resolve content-type problems with many images that I recently uploaded. complaint Incompatibility with mail plugin

Incompatibility with mail plugin: users show compatibility, missing feature, support pain that may indicate a product gap.

HTTP Headers · Incompatibility with mail plugin I’m using this plugin on a site where PostSMTP is used to send mails more reliably. complaint wp_mail conflict with Post SMTP?

wp_mail conflict with Post SMTP?: users show compatibility, missing feature, support pain that may indicate a product gap.

HTTP Headers · wp_mail conflict with Post SMTP? complaint No longer works with recent WP/PHP

No longer works with recent WP/PHP: users show bugs, compatibility pain that may indicate a product gap.

HTTP Headers · No longer works with recent WP/PHP Used this for years, it has been great but it needs updating for recent WP releases, and in particular for PHP 8.1 – there is some code that relied on earlier versions of PHP being forgiving or some common coding issues, which now breaks on an up to date system. complaint Not compatible with Elementor

Not compatible with Elementor: users show compatibility, setup pain that may indicate a product gap.

HTTP Headers · Not compatible with Elementor When used with Elementor, you can’t edit the pages. complaint What File are the Headers located in when you use PHP?

What File are the Headers located in when you use PHP?: users show compatibility pain that may indicate a product gap.

HTTP Headers · What File are the Headers located in when you use PHP? complaint Inspect Headers

Inspect Headers: users show missing feature pain that may indicate a product gap.

HTTP Headers · Inspect Headers I have several settings toggled to “ON” position, so should be enabled within plugin and headers, but when using the INSPECT HEADERS function within the tools, it shows that these settings fall in the “missing headers” category, ie that they are not enabled? complaint Expires not working

Expires not working: users show compatibility pain that may indicate a product gap.

HTTP Headers · see screenshot In your inspect headers page everything is ok – see screenshot but when I check the expires in Firefox inspector I see: Frontpage, images, php: Expires Wed, 11 Jan 1984 05:00:00 GMT js: Expires Thu, 31 Dec 2037 23:55:55 GMT css: no expires at all (see screen examples below) What should I do to set the expires properly? mixed Pro mais compliqué et uniquement en Anglais

Pro mais compliqué et uniquement en Anglais: users praise easy, which suggests what competitors already do well.

HTTP Headers · Si vous n’y connaissez rien et que vous voulez un module simple qui assure la sécurité, celui n’est pas pour vous. complaint How to use single quote to wrap sha csp?

The HTTP Headers plugin encoded single quotes, preventing sha256 CSP hashes from working.

HTTP Headers · when using single quote, the plugin encoded it into #039;