Title: HTTP response headers
Last modified: August 31, 2022

---

# HTTP response headers

 *  Resolved [johnmandarine](https://wordpress.org/support/users/johnmandarine/)
 * (@johnmandarine)
 * [3 years, 9 months ago](https://wordpress.org/support/topic/http-response-headers-2/)
 * Hello,
    I tested some of my sites on securityheaders.com and I don’t have the
   same results even though I have the same settings (for x-frame-options and x-
   content-type-options are marked as missing)
 * Do you know where the problem might come from ?
 * Thanks

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [3 years, 9 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-15969339)
 * That’s odd.
    You can try to use a Unix terminal to check them. For instance, 
   testing wordpress.org: `curl -I https://wordpress.org/` That returns:
 *     ```
       HTTP/2 200 
       server: nginx
       date: Thu, 01 Sep 2022 07:31:39 GMT
       content-type: text/html; charset=UTF-8
       vary: Accept-Encoding
       strict-transport-security: max-age=360
       x-olaf: ⛄
       link: <https://wordpress.org/wp-json/>; rel="https://api.w.org/"
       link: <https://wordpress.org/wp-json/wp/v2/pages/457>; rel="alternate"; type="application/json"
       link: <https://w.org/>; rel=shortlink
       x-frame-options: SAMEORIGIN
       x-nc: HIT ord 2
       ```
   
 * If you don’t have a shell, you can use the [https://wordpress.org/plugins/wpterm/](https://wordpress.org/plugins/wpterm/)
   plugin.
 *  Thread Starter [johnmandarine](https://wordpress.org/support/users/johnmandarine/)
 * (@johnmandarine)
 * [3 years, 9 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-15973332)
 * Ok,
    I will try. I am not familiar with shell
 *  Thread Starter [johnmandarine](https://wordpress.org/support/users/johnmandarine/)
 * (@johnmandarine)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-16011778)
 * Hello,
    Sorry for the delay.
 * I didn’t succeed with the Unix terminal so I used Postman.
 * I confirm the problem : for two different websites with the same settings, I 
   have two different results with securityheaders.com (grade D and grade B) and
   with Postman no X-Frame-Options, X-Content-Type-Options and Referrer-Policy for
   the grade D and ok for the grade B.
 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-16016193)
 * Are you using a caching plugin or a CDN? If you are, flush the cache and try 
   again.
 *  Thread Starter [johnmandarine](https://wordpress.org/support/users/johnmandarine/)
 * (@johnmandarine)
 * [3 years, 8 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-16016611)
 * Yes I’m using caching plugin. I cleared cache and it’s ok.
 * But I tested a website with the same cache plugin where I’m sure to have cleared
   cache 3 days ago and it’s on grade D…
 * And the website with the grade B has another cache plugin
 * I will ask the support of the cache plugin because I don’t want to clear cache
   everyday (I don’t see the interest with static content)
 * Thanks for your help

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘HTTP response headers’ is closed to new replies.

 * ![](https://ps.w.org/ninjafirewall/assets/icon-256x256.png?rev=976137)
 * [NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall](https://wordpress.org/plugins/ninjafirewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninjafirewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninjafirewall/)
 * [Active Topics](https://wordpress.org/support/plugin/ninjafirewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninjafirewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninjafirewall/reviews/)

 * 5 replies
 * 2 participants
 * Last reply from: [johnmandarine](https://wordpress.org/support/users/johnmandarine/)
 * Last activity: [3 years, 8 months ago](https://wordpress.org/support/topic/http-response-headers-2/#post-16016611)
 * Status: resolved