• We value your experience with Plesk during 2025
    Plesk strives to perform even better in 2026. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2025.
    Please take this short survey:

    https://survey.webpros.com/

Issue Set Webserver Option Globally

Where can I set Webserver Options like Header in Plesk globally?
How can I overwirte existing configs on each Site?

Where can I set the absolutely standard Security Headers?
Like

Code:
add_header X-Frame-Options "SAMEORIGIN" always;
add_header x-xss-protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Download-Options "noopen" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "all" always;
add_header Expect-CT 'max-age=600, enforce';
add_header X-Powered-By Cachify;
add_header Cache-Control 'public, max-age=31536000';

kind regards
 
Back
Top