Title: Abdal Security Headers Author: Ebrahim Shafiei (EbraSha) Published: مارچ 21, 2019 Last modified: آگست 29, 2026 --- جستجوی افزونه‌ها ![](https://ps.w.org/abdal-security-headers/assets/banner-772x250.png?rev=3671422) ![](https://ps.w.org/abdal-security-headers/assets/icon-256x256.png?rev=3671422) # Abdal Security Headers توسط [Ebrahim Shafiei (EbraSha)](https://profiles.wordpress.org/profshafiei/) [دانلود](https://downloads.wordpress.org/plugin/abdal-security-headers.5.5.3.zip) * [جزئیات](https://fa-af.wordpress.org/plugins/abdal-security-headers/#description) * [نقد و بررسی‌ها](https://fa-af.wordpress.org/plugins/abdal-security-headers/#reviews) * [نصب](https://fa-af.wordpress.org/plugins/abdal-security-headers/#installation) * [توسعه](https://fa-af.wordpress.org/plugins/abdal-security-headers/#developers) [پشتیبانی](https://wordpress.org/support/plugin/abdal-security-headers/) ## توضیحات Abdal Security Headers applies HTTP security headers from one dashboard. The Smart CSP Assistant watches what the site actually loads, then suggests CSP origins for you to review. Nothing is auto-whitelisted. **Smart CSP Assistant:** * Hybrid discovery: WordPress-registered assets, CSP Report-Only, a runtime observer, and an optional deep file scan of plugins and themes * Timed learning (15 minutes to 24 hours) or manual stop, with optional continuous monitoring * Optional deep file scan with a cancellable progress bar; learning duration switches to Manual so a timer cannot stop the scan * Merge selected origins into existing CSP fields without replacing current values * Marks findings already present in CSP fields as Added * Dangerous values require explicit confirmation * Blocking CSP is paused during learning so the site keeps working **Also included:** * XSS, clickjacking, MIME sniffing, HSTS, Referrer-Policy, and Permissions-Policy * Live CSP header preview and a full-size CSP directive editor * WordPress hardening: hide version, strip extra headers, XML-RPC, REST API, generic login errors * Top-level Security Headers menu, RTL, and mobile layout * Standard WordPress dashboard widget for security status, headers, CSP, and recent activity **Security Headers Managed:** * X-Frame-Options * X-XSS-Protection * X-Content-Type-Options * Strict-Transport-Security (HSTS) * Content-Security-Policy (CSP) * Referrer-Policy * Permissions-Policy * Access-Control-Allow-Origin ### Languages This plugin is available in the following languages: – English (en_US) – Persian( fa_IR) – Spanish (es_ES) – Japanese (ja) – German (de_DE) – French (fr_FR) – Portuguese– Brazil (pt_BR) – Russian (ru_RU) – Italian (it_IT) – Turkish (tr_TR) – Chinese Simplified( zh_CN) – Arabic (ar) ### License This plugin is released under the **AGPLv3 or later** License. License details: [https://www.gnu.org/licenses/agpl-3.0.html](https://www.gnu.org/licenses/agpl-3.0.html) ## عکس‌های صفحه [⌊Dashboard with Security Headers and Additional Security Features⌉⌊Dashboard with Security Headers and Additional Security Features⌉[ Dashboard with Security Headers and Additional Security Features [⌊Smart CSP Assistant⌉⌊Smart CSP Assistant⌉[ Smart CSP Assistant [⌊Content Security Policy⌉⌊Content Security Policy⌉[ Content Security Policy [⌊securityheaders.com score before and after enabling the plugin⌉⌊securityheaders. com score before and after enabling the plugin⌉[ securityheaders.com score before and after enabling the plugin ## نصب 1. Upload the plugin files to `/wp-content/plugins/abdal-security-headers` 2. Activate the plugin through the WordPress plugins screen 3. Open Security Headers in the WordPress admin menu to configure ## سوالات متداول ### Does the Smart CSP Assistant auto-whitelist origins? No. It only suggests detections. You review them and apply selected sources. Existing CSP values are merged, not replaced. ### Will learning mode break the site? During learning, blocking CSP is paused and Report-Only is sent so resources can be discovered without blocking the page. ### Is this plugin compatible with caching plugins? Yes, it works with major caching plugins. ### Do I need to write CSP by hand? No. Start a Smart Scan, browse the site, then apply the sources you accept. You can still edit directives manually. ## نقد و بررسی‌ها ![](https://secure.gravatar.com/avatar/a5f6fa75e616fc0ace648056af374275d62fe2a034c33c145cdbeec7b573d5dd? s=60&d=retro&r=g) ### 󠀁[Excellent!](https://wordpress.org/support/topic/excellent-8175/)󠁿 [noxilon](https://profiles.wordpress.org/noxilon/) آکتوبر 12, 2019 It worked. ![](https://secure.gravatar.com/avatar/fd6fc9120b30929229bd7636d89bdf2ac927126e350ad17a395e69327dd462db? s=60&d=retro&r=g) ### 󠀁[True Security](https://wordpress.org/support/topic/true-security/)󠁿 [privacygurdian](https://profiles.wordpress.org/privacygurdian/) مارچ 21, 2019 Easy Install And Be Secure [ خواندن تمامی 2 نقد و بررسی‌ ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/) ## توسعه دهندگان و همکاران “Abdal Security Headers” نرم افزار متن باز است. افراد زیر در این افزونه مشارکت کرده‌اند. مشارکت کنندگان * [ Ebrahim Shafiei (EbraSha) ](https://profiles.wordpress.org/profshafiei/) [ترجمه “Abdal Security Headers” به زبان شما.](https://translate.wordpress.org/projects/wp-plugins/abdal-security-headers) ### علاقه‌ مند به توسعه هستید؟ [کد را مرور کنید](https://plugins.trac.wordpress.org/browser/abdal-security-headers/), را بررسی کنید [مخزن SVN](https://plugins.svn.wordpress.org/abdal-security-headers/), یا مشترک شوید [گزارش توسعه](https://plugins.trac.wordpress.org/log/abdal-security-headers/) توسط [RSS](https://plugins.trac.wordpress.org/log/abdal-security-headers/?limit=100&mode=stop_on_copy&format=rss). ## گزارش تغییرات #### 5.5.3 * Use the same custom plugin modal for Save Changes and Reset as Clear Learning Data #### 5.5.2 * Tighten dashboard widget status cards by removing hints, using a smaller status font, and a solid Open Settings button #### 5.5.1 * Match the dashboard widget layout to the native status cards, activity list, stats bar, and footer actions #### 5.5.0 * Add a standard WordPress dashboard widget for security status, active headers, CSP, and recent activity #### 5.4.2 * Add a Scan selected items switch so Deep file scan can be limited to chosen plugins and themes #### 5.4.1 * Scroll the Smart CSP Assistant source table after 10 rows * Add an editable Deep file scan skip list, with defaults such as node_modules and .git #### 5.4.0 * Add a Deep file scan switch in Smart CSP Assistant to scan plugin and theme files on disk * Show a cancellable red-to-green progress bar after counting files * Lock learning duration to Manual while Deep file scan is on * Convert continuous monitoring into an iOS-style switch #### 5.3.0 * Add complete translations for Spanish, Japanese, German, French, Brazilian Portuguese, Russian, Italian, Turkish, Simplified Chinese, and Arabic #### 5.2.5 * Show a programmer credit line at the bottom of the settings dashboard #### 5.2.4 * Make the Smart CSP Assistant learning duration segmented control narrower with smaller labels #### 5.2.3 * Replace the Smart CSP Assistant learning duration dropdown with a compact segmented control #### 5.2.2 * Mark Smart CSP Assistant findings that already exist in CSP directive fields as Added (green, bold) #### 5.2.1 * Show a loading spinner on Smart CSP Assistant buttons while requests are in progress #### 5.2.0 * Add Smart CSP Assistant with hybrid static, report-only, and runtime discovery * Suggest CSP origins for review without automatically trusting or whitelisting them #### 5.1.10 * Use the WordPress Modal component for save and reset confirmations #### 5.1.9 * Move the plugin to a top-level admin menu with a shield icon #### 5.1.8 * Open a large editor modal when clicking CSP directive text fields #### 5.1.7 * Stack CSP General settings above CSP Directives in matching full-width boxes #### 5.1.6 * Use the full WordPress admin content width for the settings dashboard instead of a 1280px container #### 5.1.5 * Load admin CSS/JS from the exact options page hook returned by WordPress * Keep filemtime cache-busting query args on admin assets when hiding the WordPress version * Do not send the frontend Content-Security-Policy header on wp-admin requests * Update translation catalogs for the redesigned settings dashboard #### 5.1.3 * Fixed CSP preview formatting issues * Resolved RTL/LTR conflicts in the interface * Fixed header removal functionality * Improved compatibility with various WordPress themes #### 5.1.2 * Fixed UI/UX issues #### 5.1.1 * Fixed UI/UX issues * Improved mobile responsiveness * Enhanced RTL support #### 5.1.0 * Complete UI/UX redesign * Added real-time CSP preview * Added iOS-style switches * Added full RTL support * Improved performance * Updated security headers implementation #### 2.0.0 * Updated security headers implementation * Enhanced documentation #### 1.2.0 * Fixed Content-Security-Policy issue * Removed widget functionality #### 1.1.0 * Fixed OOP implementation * Added widget support #### 1.0 * Initial release * Basic security headers implementation ## اطلاعات * Version **5.5.3** * Last updated **3 ساعت پیش** * Active installations **10+** * WordPress version ** 6.7.2 یا بالاتر ** * Tested up to **7.1** * PHP version ** 7.2 یا بالاتر ** * Language * [English (US)](https://wordpress.org/plugins/abdal-security-headers/) * Tags * [content security policy](https://fa-af.wordpress.org/plugins/tags/content-security-policy/) [hsts](https://fa-af.wordpress.org/plugins/tags/hsts/)[security](https://fa-af.wordpress.org/plugins/tags/security/) [Security Headers](https://fa-af.wordpress.org/plugins/tags/security-headers/) [x-frame-options](https://fa-af.wordpress.org/plugins/tags/x-frame-options/) * [نمایش پیشرفته](https://fa-af.wordpress.org/plugins/abdal-security-headers/advanced/) ## امتیازها 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/abdal-security-headers/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/abdal-security-headers/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/abdal-security-headers/reviews/) ## مشارکت کنندگان * [ Ebrahim Shafiei (EbraSha) ](https://profiles.wordpress.org/profshafiei/) ## پشتیبانی چیزی برای گفتن دارید؟ نیاز به کمک دارید؟ [مشاهده انجمن پشتیبانی](https://wordpress.org/support/plugin/abdal-security-headers/) ## کمک مالی آیا تمایل دارید از پیشرفت این افزونه حمایت کنید؟ [ کمک مالی به این افزونه ](https://ebrasha.com/abdal-donation)