• Resolved Anonymous User 15325940

    (@anonymized-15325940)


    Hi, so far Security Ninja pro works fine. However, there is one thing that has no effect at all: Security Fixes – Security Headers (e.g., X-Content-Type-Options, X-XSS-Protection, etc.) On or off does not make any difference. And if I have my site checked by tools, it is said that the headers are not set.

    Any idea how to fix this?

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Lars Koudal

    (@lkoudal)

    Hello @csab1915

    Thank you for writing to us – if you have problem detecting the changes to security headers please check the following:

    – Are you using a cache plugin? That could prevent changes to header showing up.
    – Are you using Cloudflare? Please check header settings on CF.

    When I use a quick test right now, I can see the X-Content-Type-Options, X-Frame-Options, Feature-Policy, Refererrer-Policy and X-XSS-Protection headers are set.

    Thread Starter Anonymous User 15325940

    (@anonymized-15325940)

    Thanks a lot, I guess it was related to cloudflare or wp-rocket. I now managed to add them though using the options of security ninja had no effect. I checked chmod which should not be an issue (other plugins e.g., wp-rocket, can edit htaccess).

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security fixes have no effect’ is closed to new replies.