Not all security headers are installed
-
I installed these headers in htaccess
Really Simple SSL
Header always set Strict-Transport-Security “max-age=31536000; includeSubDomains; preload”
Header always set X-XSS-Protection “0”
Header always set X-Content-Type-Options “nosniff”
Header always set Referrer-Policy “strict-origin-when-cross-origin”
Header always set X-Frame-Options: “SAMEORIGIN”
Header always set Permissions-Policy: “geolocation=(); midi=();notifications=();push=();sync-xhr=();accelerometer=(); gyroscope=(); magnetometer=(); payment=(); camera=(); microphone=();usb=(); xr=();speaker=(self);vibrate=();fullscreen=(self);”
End Really Simple SSL
But they still write to me that not all headers are installed
screenshot
https://ibb.co/G3gm1pt
What did I miss?
I may not have installed the Upgrade Insecure Request, but I do not know how to install it.
I also have a question, did I set all the headers correctly? I have a poor understanding of these security headers
- The topic ‘Not all security headers are installed’ is closed to new replies.