I have tried this plugin but nothing is working.

  • Resolved Hybreeder

    (@hybreeder)


    1 year, 4 months ago

    HI

    I have installed the plugin and I also have added the below code in apache2.conf file and restarted the server

    # X-Frame-Options
<IfModule mod_headers.c>
 Header set Access-Control-Allow-Origin "*"
 Header set Access-Control-Allow-Credentials true
 Header set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT"
 Header set Access-Control-Max-Age "1000"
 Header set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"
</IfModule>

    but it’s not working, What will be the issue?

    I can see that your plugin added some code in the htaccess

    # BEGIN Headers Security Advanced & HSTS WP 5.0.25
<IfModule mod_headers.c>
Header set Access-Control-Allow-Methods "GET,POST"
Header set Access-Control-Allow-Headers "Content-Type, Authorization"
Header set Content-Security-Policy "upgrade-insecure-requests;"
Header set Cross-Origin-Embedder-Policy "unsafe-none; report-to='default'"
Header set Cross-Origin-Embedder-Policy-Report-Only "unsafe-none; report-to='default'"
Header set Cross-Origin-Opener-Policy "unsafe-none"
Header set Cross-Origin-Opener-Policy-Report-Only "unsafe-none; report-to='default'"
Header set Cross-Origin-Resource-Policy "cross-origin"
Header set Permissions-Policy "accelerometer=(), autoplay=(), interest-cohort=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), window-placement=()"
Header set Referrer-Policy "strict-origin-when-cross-origin"
Header set Strict-Transport-Security "max-age=63072000"
Header set X-Content-Security-Policy "default-src 'self'; img-src *; media-src * data:;"
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "SAMEORIGIN"
Header set X-XSS-Protection "1; mode=block"
Header set X-Permitted-Cross-Domain-Policies "none"
</IfModule>
# END Headers Security Advanced & HSTS WP
Viewing 15 replies - 1 through 15 (of 22 total)
  • Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder , thank you for your topic and for downloading the plugin.

    I am ANDREA and I will help you in your request, please confirm me that you currently have in the htaccess the plugin code and the code also that you manually added “X-Frame-Options”?

    Have you tried testing by deleting the block you added by hand? Lastly when you say it is not working do you mean you are not encountering the headers ?

    I am here to help you in troubleshooting the issue

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 Thank you so much for the reply,

    First i have checked on below website and i am getting F result. https://securityheaders.com/ then i installed the plugin and getting the same result….

    After some research i have found the code that i have to add it in the apache config file and added the same but still getting same output.

    Yes i have code access..

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder , thanks for the feedback. Do you use caching plugins or services ? Example: cloudflare, wp supercache (in this case I recommend you to clear the cache).

    To do more testing you can give the name of the website

    I am also available at support@tentacleplugins[dot]com

    Thread Starter Hybreeder

    (@hybreeder)

    Yes, I have cache plugin, I am using wp-rocket, I have cleared that too but showing same result

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03, This issue is resolved. I have updated my WordPress and cleared the wp-rocket plugin more than 2-3 times and then I saved this header plugin data after clearing the cache.

    And it’s started working. Thank you much for the help

    Plugin Author Andrea Ferro

    (@unicorn03)

    Great!!! I’m glad it works, let me know if I can be of any help and I hope you enjoyed the assistance

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 , Today again this issue started… I have updated wordpress, plugins and cleared all cache but now i am getting same error

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hello @hybreeder , thank you for your feedback, don’t worry I will help you in the issue.

    Last time if I’m not mistaken you had managed to solve it by updating the cache plugin, can you confirm?

    Is any log recorded only of the plugin ? So that I can help you faster

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 , Where can i get the logs for this plugin? i have updated all the plugins and wordpress. I also added the some header code in apache2 config file.


    A few days ago i had asked same question in stack overflow
    https://stackoverflow.com/questions/76673611/header-set-access-control-allow-origin-code-added-but-nothing-is-happening

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder , thanks for the feedback, the plugin only logs you can see it from your service hosting (it is usually called error log or error website requests).

    This way I can help you in more detail with the request, also remember to leave the ion headers only the ones the plugin uses and not the ones manually put in the beginning of this thread.

    Can you tell me if you use very restrictive permissions on files other than 777 or 755?

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03, I have deactivated the wp-rocket plugin and it’s started working… but i don’t want to deactivate this plugin. can other way to solve this issue?

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder, thanks for the feedback, after your confirmation that wp-rocket has a problem with caching headers and a possible misconfiguration that doesn’t make both manual and automatic plugin headers work, please confirm?

    In this case I checked the wp-rocket guide to help you in the best way possible and before providing you the final solution I ask you if you can provide me more information about wp-rocket configurations (cache, optimized files, preolad etc…)

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 , Yes, it’s confired that if i deactivate the wp-rocket plugin then it’s working..

    For wp-rocket configurations, I have default setting provided by wp rocket, I haven’t changed anything in this yet.

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 any idea how to solve this? I have contacted Wp Rocket team and they said content contact the plugin Header security team only

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder, thanks for the feedback are ongoing testing and verification with wp-rocket documentations.

    In our first tests we see no anomalies with wp-rocket and the plugin,we are also up and running at support@tentacleplugins[dot]com

Viewing 15 replies - 1 through 15 (of 22 total)
  • The topic ‘I have tried this plugin but nothing is working.’ is closed to new replies.