HTTP Security Headers for WordPress 18. February 2017 Note strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection