Reply To: Where to add security header information like “strict-transport-security”

Hi,

I tried to send the customizeation request several times without any success.

Theme to customize: Lawyer PRO
Company: JF.Consulting GmbH
Name J. Feldt, CEO

I would like to have some security features within the theme. It is – to my mind – nowadays necessary to have some additional http security header options like:

– Strict-Transport-Security max-age=31536000; includeSubDomains; preload
– Permissions-Policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()

and other options else well.

– Expect-CT
– Cross-Origin-Embedder-Policy
– Cross-Origin-Opener-Policy
– Cross-Origin-Resource-Policy
– Server
– X-Powered-By
– Referrer-Policy
– x-frame-options
– X-XSS-Protection
– X-Content-Type-Options
– Content-Security-Policy

– Probably it is just manageable with a free text field, wich loads all the security http header options, line by line, separated by semicolon.
– Pleas sent me first a little calculation about how much this will cost, before you do
anything, please.
– And if we do this – how will this customization react with generally provided theme upgrades?

Kind Regards!

J. Feldt