Add Site Security Headers to WordPress.com Hosted Site

• 

  mipuredanes · Member · Aug 5, 2021 at 2:21 pm

  • Copy link
  • Add topic to favorites

  How to add site security headers to a WordPress.com hosted site?

  HTTP Strict Transport Security (HSTS) – I believe WordPress.com adds this by default
  Content Security Policy (CSP)
  Cross Site Scripting Protection (X-XSS)
  X-Frame-Options
  X-Content-Type-Options

  I don’t have a site with WordPress.com yet

• 

  staartmees · Member · Aug 5, 2021 at 2:23 pm

  • Copy link

  You can’t and you don’t need to as wordpress.com takes care of the security for you.

• 

  fstat · Staff · Aug 6, 2021 at 11:38 am

  • Copy link

  Hi there,

  You can read in the article linked below how WordPress.com protects your site.

  https://wordpress.com/support/security/