Hi @giorgos_d2,
Currently, after some testing and user feedback, the 5.2.3 update is needed to resolve the issue. If it doesn’t fix the bug in previous versions, try deleting and reinstalling the plugin.
Solution:
Go to Settings > Headers Security, make any change, Save (forces regeneration)
OR do a clean reinstall: Uninstall plugin > Reinstall > Works
Multiple users confirmed this resolves remaining issues.
Note: Backup custom settings before uninstalling if you have any.
Hi @giorgos_d2,
New update 5.2.4 available
With version 5.2.4, I have definitively resolved various issues reported by users, improved compatibility, and optimized the management of security policies generated by the plugin.
To ensure that all changes are applied correctly, I recommend deactivating and reactivating the plugin after the update.
This step allows the system to rebuild the necessary files and fully apply the new settings.
Thank you for your support and for your reports, which have allowed us to improve the plugin.
Regarding the issue with google analytics it’s ok now, but I have doubts now if other points are affected, e.g. if Google is correctly detecting sitemaps and if crawling requests from Google are generally affected. I see issues in google webmaster tools and I don’t know if your plugin has blocking mechanisms, I wouldn’t want legal crawling bots to be blocked under any circumstances.
Hi @giorgos_d2,
Thank you for the details. To help you as quickly as possible, you can also write to me at openheaders.org, but you can also use this channel without any problems, whichever you prefer :).
The plugin does not modify the robots.txt file, does not send X-Robots-Tag headers, and does not inspect or block user agents such as Googlebot.
I can confirm that it cannot selectively block Google or other legitimate crawlers.
The issue encountered in Google Search Console is likely related to other factors from other experiences (e.g., robots.txt, server/firewall rules, or redirects), but not to this plugin.
The only area where the plugin could affect Google Analytics is the Content-Security-Policy: if configured incorrectly, it could prevent the GA script from loading. Since GA is working correctly on your end, the current configuration is not blocking it.
Thank you for your feedback.
I am available to help you with anything else or provide further information. Giorgos
The “uninstall / reinstall” solution also works if there is a problem with embedded iframe Google maps.
