HTTP headers works, HTTPS does not

  • cJayy

    (@cjayy)


    7 years, 11 months ago

    Hi,
    I have configured plugin to send some of security headers. It’s working fine when accessing via HTTP, but when I reach web via HTTPS it doesn’t send any of headers from plugin.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Dimitar Ivanov

    (@zinoui)

    7 years, 11 months ago

    Hi @cjayy

    Chrome DevTools console throws the following error:

    Failed to set referrer policy: The value ” is not one of ‘no-referrer’, ‘no-referrer-when-downgrade’, ‘origin’, ‘origin-when-cross-origin’, ‘same-origin’, ‘strict-origin’, ‘strict-origin-when-cross-origin’, or ‘unsafe-url’. The referrer policy has been left unchanged.

    Try to fix it, I guess this might be the reason.

    Regards,

    Thread Starter cJayy

    (@cjayy)

    7 years, 11 months ago

    Hello @zinoui

    I think this error is not the reason why plugin doesn’t send headers, but the result of plugin not sending headers. According to browser documentation this error is default error when referrer policy header is not set. (And that is the reason why I want to use this plugin.

    // I don’t know how else should I fix missing headers than by activating plugin to set headers… Do you know any other solution?

    Thank you 🙂

    • This reply was modified 7 years, 11 months ago by cJayy.
    • This reply was modified 7 years, 11 months ago by cJayy.
    Plugin Author Dimitar Ivanov

    (@zinoui)

    7 years, 11 months ago

    If you’re using this plugin in the “Apache” mode (which is recommended) then settings are stored in your .htaccess file. Can I see it?

    Thread Starter cJayy

    (@cjayy)

    7 years, 11 months ago

    I am not using Apache mode. When I try to turn it on I get following error.

    Fatal error: Uncaught Error: Call to undefined function insert_with_markers() in /wp-content/plugins/http-headers/http-headers.php:1055

    I don’t know how to debug this.

    jpollie

    (@jpollie)

    7 years, 8 months ago

    Ahhh same for me, we are not using Apache but IIS, on https its not working my website gets a D on securityheaders.com

    Plugin Author Dimitar Ivanov

    (@zinoui)

    7 years, 8 months ago

    Hi @jpollie

    Unfortunately the HTTP Headers plugin doesn’t supports IIS yet.
    However, the IIS support is scheduled for v2.0

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘HTTP headers works, HTTPS does not’ is closed to new replies.