Recommended WordPress security headers

[ljubacanoa]

Are there recommended (for a typical site) security header configuration values somewhere in the documentation (or personal recommendation as well)?

 

[Cold-Egg]

you could check the header security from https://securityheaders.com/, then add the recommended header to your site.

Here's the guide to show you how to custom the header.
https://openlitespeed.org/kb/setting-up-cors-on-openlitespeed/

 

[ljubacanoa]

Thanks.