Content Security Policy | ww.wp.xz.cn

Resolved kpietrek
(@kpietrek)

5 years, 6 months ago
Hello.

Please tell me how to solve it. When I go to “site status“, I get information that there is a problem with SSL. After developing it, I have this message:
```
Your .htaccess file does not contain all recommended security headers.
Content Security Policy: Upgrade Insecure Requests
```
What should I change, what should I set up to make this problem disappear?

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Author Mark
(@markwolters)

5 years, 6 months ago

Hi @kpietrek,

we have updated the article to include the Upgrade-Insecure-Requests header. To fix this, you can add the following header to your .htaccess file, alongside the other security headers:

Header always set Content-Security-Policy "upgrade-insecure-requests"

Also see https://really-simple-ssl.com/site-health-recommended-security-headers/

Let me know if you have any other questions.

Thread Starter kpietrek
(@kpietrek)

5 years, 6 months ago

Thank you.
It helped.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Content Security Policy’ is closed to new replies.

2 replies
2 participants
Last reply from: kpietrek
Last activity: 5 years, 6 months ago
Status: resolved