Dimitar Ivanov

@toomanyairmiles I can’t reproduce it, but you better upgrade to latest version.

P.S. Sorry for delayed response.

Hi @nashvilledesigna,

You can use this configuration:

X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

P.S. Sorry for delayed response.

@steadwell,

No, you do not need to send any additional headers.

Since your page is loaded over the HTTPS protocol, you need to serve all of the resources over the HTTPS too.

Maryl, you can try to upgrade to the latest version. I think this will solve the issue.
P.S. Sorry for delayed response.

Hi @prodport,

After enabling the Public-Key-Pins header, you must fill-in next required fields:
‘pin-sha256’, ‘pin-sha256 (backup key)’ and ‘max-age’.

To generate hashes you can use: https://report-uri.io/home/pkp_hash

Regards,

Hi @lordvader,

You are right. This is a bug. Now it is fixed and works as expected.

Thanks!

@alegira,

Chrome, Safari, Opera does not support the ALLOW-FROM option.
See: https://caniuse.com/#search=x-frame-options

Cheers,

@lordvader,

The answer is yes, the plugin is compatible with WordPress 4.6.1.

Cheers,

Hi Suresh,

Yes, this plugin definitely works on Nginx server. In fact, the server doesn’t matter. Works well on Apache too.

Regards,
Dimitar

• This reply was modified 8 years, 4 months ago by Dimitar Ivanov.

Hi mitchellk,

Thanks for your report, but I can’t confirm that this issue exists.