Hi @darrenasmithmtm,
#1: Code execution allowed in the public “uploads” folder
This message appears if you have not enabled the option “Prevent code execution in the public ‘Uploads’ folder” under Settings > Hardening.
It is generally recommended to disable PHP code execution in any public-facing directory where user uploads are stored, as an added security measure.
You can either enable the option and click “Save”, or if you do not wish to use this feature, dismiss the Dashboard notice about it by clicking the “X” behind the notice.
#2: Frame Ancestors header not set
This message appears if you haven’t configured the Frame Ancestors security header (details here) found under Settings > Content Security Policy.
As the latter concerns a Premium feature, please reach us via support(at)really-simple-ssl.com if you have any further questions about this.
Kind regards, Janro
-
This reply was modified 3 years, 2 months ago by
Jarno Vos.
Thank you.
#1: Code execution allowed in the public “uploads” folder
The setting is on: https://d.pr/i/5V0tv7
#2: Frame Ancestors header not set
I have premium. https://d.pr/i/GTsuhs
Hi @darrenasmithmtm,
If you’ve enabled the setting, the notice in the Dashboard about this feature might still be cached. You can dismiss the notice by clicking the “X” behind it.
The latter concerns Premium feature(s) and as we’re solely allowed to discuss the Free plugin on these forums, please reach us via support(at)really-simple-ssl.com if you require any further assistance with this.
Kind regards, Jarno