v2.1.0

Header Fortress v2.1.0

This release redesigns the scanner so the score reflects the final live response delivered to visitors, instead of only matching the headers generated by Header Fortress.

Added

• live-response-based scanner scoring
• source attribution in scanner results
• clearer header status labels for mixed environments

Changed

• scanner score now counts headers present in the final response
• scanner UI now shows a single visible status per header
• top summary cards now describe live-response posture
• updated translation and language files

Notes

• source attribution is best-effort inference
• Cloudflare attribution is intentionally conservative
• this release improves scanner clarity for sites using CDNs, reverse proxies, or multiple header sources

Resumo:

• agora: não publique em main
• primeiro: merge do PR
• depois: release v2.1.0 na main

v2.0.0

Header Fortress v2.0.0

Initial public release of Header Fortress.

Features

• Security header management for WordPress
• CSP with dynamic nonce support
• HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
• COOP, COEP, CORP, Clear-Site-Data, Report-To, and NEL
• Live scanner with plugin-vs-live response comparison
• Browser report collection screen
• Security presets
• Import, export, and reset tools
• pt_BR translation files included

Notes

• HSTS is only sent on HTTPS responses
• Final headers may still be affected by Cloudflare, server rules, or other plugins