Hi @darrenasmithmtm,
#1: Code execution allowed in the public “uploads” folder
This message appears if you have not enabled the option “Prevent code execution in the public ‘Uploads’ folder” under Settings > Hardening.
It is generally recommended to disable PHP code execution in any public-facing directory where user uploads are stored, as an added security measure.
You can either enable the option and click “Save”, or if you do not wish to use this feature, dismiss the Dashboard notice about it by clicking the “X” behind the notice.
#2: Frame Ancestors header not set
This message appears if you haven’t configured the Frame Ancestors security header (details here) found under Settings > Content Security Policy.
As the latter concerns a Premium feature, please reach us via support(at)really-simple-ssl.com if you have any further questions about this.
Kind regards, Janro
-
This reply was modified 2 years ago by
jarnovos.