Plugin Contributor
Maya
(@tdgu)
Hi,
Is the option at WP Hide > General / HTML > User Interactions > Disable Developer Tools, try to change that option to No.
But I am not able to replicate the issue from this side. That message shows up only when try to open the browser developer tool, which is the expected behavior. Is there a specific browser which you use where see the problem ?
Thanks
Yeah. Thanks. Seems issue has solved now. One more.
By default , plugin add the follwing codes in .htacess file. Due to these commands, Images are showing missing. On comment these , Strat showing Images.
============================================================
Header set X-XSS-Protection “1; mode=block” Header set X-Permitted-Cross-Domain-Policies “all” Header set X-Frame-Options “SAMEORIGIN” Header set X-Download-Options “noopen” Header set X-Content-Type-Options “nosniff” Header set Cross-Origin-Resource-Policy “cross-origin” Header set Cross-Origin-Opener-Policy “same-origin” Header set Cross-Origin-Embedder-Policy “require-corp” Header unset X-Powered-By Header unset X-Pingback
END WP Hide & Security Enhancer
==========================================================
In admin > Security-Headers is showing 1% Poor and last showing:
Warning! The following headers could not be found:cross-origin-embedder-policycross-origin-opener-policycross-origin-resource-policyx-content-type-optionsx-download-optionsx-frame-optionsx-permitted-cross-domain-policiesx-xss-protection
Ensure the server mod_headers module is active.
Please let me know Are these headers Important ?
Plugin Contributor
Maya
(@tdgu)
Hi,
That is caused by misusing a security header. Those headers are powerful but require some technical understanding of each option. So please take the time to read the documentation and understand each of the headers then apply, if needed. How you can set up those headers also highly depends on different aspects of your site (e.g. if using 3rd images or scripts, media types etc ).
Keep in mind that, you should never manually change anything on your .htaccess file. Those rewrites are created by the core, based on the options and their values you used through the interfaces. So if something does not work as expected for you, change its options or disable it through the dashboard.
In your case, I suggest resetting all security headers and clear the site caches then checking again. Further, make the header usage one by one while ensuring the newly added will not break anything.
Thanks
