=== Headers Shield ===
Contributors: yodsira
Tags: security, headers, x-frame-options, referrer-policy
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

One-click security headers with three hardened presets.

== Description ==

Headers Shield sends the security headers modern browsers expect:

* X-Frame-Options (SAMEORIGIN / DENY)
* X-Content-Type-Options: nosniff
* Referrer-Policy
* X-XSS-Protection (optional, legacy)
* Permissions-Policy (raw directive list)
* X-Permitted-Cross-Domain-Policies

Three presets — Minimal, Standard, Strict — get you protected in one click, and every
header can be fine-tuned individually afterwards. The active header list is always
visible on the settings screen.

Upgrade to Headers Shield Pro for HTTP Strict Transport Security (HSTS), a
Content-Security-Policy builder with Report-Only mode, and a CSP violation journal.

== Installation ==

1. Upload the `headers-shield` folder to `/wp-content/plugins/`.
2. Activate the plugin.
3. Open Settings → Headers Shield and pick a preset.

== Changelog ==

= 1.0.0 =
* Initial release.
