I have tried this plugin but nothing is working.

  • Resolved Hybreeder

    (@hybreeder)


    1 year, 4 months ago

    HI

    I have installed the plugin and I also have added the below code in apache2.conf file and restarted the server

    # X-Frame-Options
<IfModule mod_headers.c>
 Header set Access-Control-Allow-Origin "*"
 Header set Access-Control-Allow-Credentials true
 Header set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT"
 Header set Access-Control-Max-Age "1000"
 Header set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"
</IfModule>

    but it’s not working, What will be the issue?

    I can see that your plugin added some code in the htaccess

    # BEGIN Headers Security Advanced & HSTS WP 5.0.25
<IfModule mod_headers.c>
Header set Access-Control-Allow-Methods "GET,POST"
Header set Access-Control-Allow-Headers "Content-Type, Authorization"
Header set Content-Security-Policy "upgrade-insecure-requests;"
Header set Cross-Origin-Embedder-Policy "unsafe-none; report-to='default'"
Header set Cross-Origin-Embedder-Policy-Report-Only "unsafe-none; report-to='default'"
Header set Cross-Origin-Opener-Policy "unsafe-none"
Header set Cross-Origin-Opener-Policy-Report-Only "unsafe-none; report-to='default'"
Header set Cross-Origin-Resource-Policy "cross-origin"
Header set Permissions-Policy "accelerometer=(), autoplay=(), interest-cohort=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), window-placement=()"
Header set Referrer-Policy "strict-origin-when-cross-origin"
Header set Strict-Transport-Security "max-age=63072000"
Header set X-Content-Security-Policy "default-src 'self'; img-src *; media-src * data:;"
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "SAMEORIGIN"
Header set X-XSS-Protection "1; mode=block"
Header set X-Permitted-Cross-Domain-Policies "none"
</IfModule>
# END Headers Security Advanced & HSTS WP
Viewing 7 replies - 16 through 22 (of 22 total)
  • Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 Thank you so much for the reply. I have tested same with other website and got the same issue

    Plugin Author Andrea Ferro

    (@unicorn03)

    Please understand I always try to respond in the shortest time. In the meantime I ask you in addition to the other details you gave me if there are restrictive file permissions ?

    The strange thing is that it does not even take your headers the manual ones.

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 , I completely understand. I have checked the file permission. I have set 777 permission to all the files. but still getting same issue…

    Thread Starter Hybreeder

    (@hybreeder)

    @unicorn03 Have you found any solution in this?

    Thread Starter Hybreeder

    (@hybreeder)

    Have you found any solution?

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @hybreeder , I have performed several tests but I am not experiencing the issue of not inserting headers. I have made updates in the plugin that will come out with the next version.

    I checked the topic again to see if I had missed any clues for the issue but I saw that if you disable Wp-Rocket everything works correctly for you and if you instead manually enter the headers as you had mentioned it does not show them.

    I’m asking if you can do another cache cleanup both on the Wp-Rocket side, hosting (if active by default) and third party services (if used).

    Can you show me a log only referring to the plugin if it shows you errors or warnings.

    telekom

    (@telekom)

    I’m using wp-rocket and I have the same issue.

    does anyone found a solution for this?

Viewing 7 replies - 16 through 22 (of 22 total)
  • The topic ‘I have tried this plugin but nothing is working.’ is closed to new replies.