Title: Missing headers
Last modified: November 22, 2019

---

# Missing headers

 *  Resolved [PaulH](https://wordpress.org/support/users/phdesignsuk/)
 * (@phdesignsuk)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/missing-headers/)
 * After installing and activating the plugin and it’s options i get these errors
   when i scan the site with Sucuri site check;
 * Missing security header for XSS Protection. Affected pages:
    [https://****/privacy-policy](https://****/privacy-policy)
   [https://****/wp-content/themes/flatsome/](https://****/wp-content/themes/flatsome/)
   [https://****/wp-includes/css/](https://****/wp-includes/css/) [https://****/](https://****/)
   for Google’s UA
 * Missing security header to prevent Content Type sniffing. Affected pages:
    [https://****/privacy-policy](https://****/privacy-policy)
   [https://****/wp-content/themes/flatsome/](https://****/wp-content/themes/flatsome/)
   [https://****/wp-includes/css/](https://****/wp-includes/css/) [https://****/](https://****/)
   for Google’s UA
 * Missing Strict-Transport-Security security header. Affected pages:
    [https://****/privacy-policy](https://****/privacy-policy)
   [https://****/wp-content/themes/flatsome/](https://****/wp-content/themes/flatsome/)
   [https://****/wp-includes/css/](https://****/wp-includes/css/) [https://****/](https://****/)
   for Google’s UA
 * Why am i receiving these errors, is it an issue and how can i fix it?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Dimitar Ivanov](https://wordpress.org/support/users/zinoui/)
 * (@zinoui)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/missing-headers/#post-12184134)
 * Hi [@phdesignsuk](https://wordpress.org/support/users/phdesignsuk/)
 * Which mode is the active one, e.g. PHP or Apache? I’m asking this because the
   PHP mode combined with some third-party caching plugin won’t works at all. That’s
   why I strongly recommend the Apache mode.
 * Regards,
 *  Thread Starter [PaulH](https://wordpress.org/support/users/phdesignsuk/)
 * (@phdesignsuk)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/missing-headers/#post-12184435)
 * According the the site health tab the server is apache.
 *  Plugin Author [Dimitar Ivanov](https://wordpress.org/support/users/zinoui/)
 * (@zinoui)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/missing-headers/#post-12193298)
 * It’s ok for the server, but I’m asking about the plugin mode.
    You can check 
   it on the ‘Advanced settings’ page inside the plugin.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Missing headers’ is closed to new replies.

 * ![](https://ps.w.org/http-headers/assets/icon-128x128.png?rev=1413576)
 * [HTTP Headers](https://wordpress.org/plugins/http-headers/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/http-headers/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/http-headers/)
 * [Active Topics](https://wordpress.org/support/plugin/http-headers/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/http-headers/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/http-headers/reviews/)

## Tags

 * [apache](https://wordpress.org/support/topic-tag/apache/)
 * [php](https://wordpress.org/support/topic-tag/php/)

 * 3 replies
 * 2 participants
 * Last reply from: [Dimitar Ivanov](https://wordpress.org/support/users/zinoui/)
 * Last activity: [6 years, 6 months ago](https://wordpress.org/support/topic/missing-headers/#post-12193298)
 * Status: resolved