memery2020
Forum Replies Created
-
Thanks Mark,
I had to delete and reinstall the plugin for it to take effect as just updating didn’t work. The message has now gone. 🙂
The security headers issue though may be another bug. On my sites that I haven’t updated to 4.0.0 or 4.0.1, I am not getting the previously mentioned error regarding the security headers. But on all of my sites that I had updated the plugin on, the .htaccess file seems to have been altered.
Hi Mark,
Can’t upload an image but the below is the copied text, it may be related to the upgrade as I’ve just upgraded a couple of other sites and have got a “missing security headers” alert under the “site health” section.
No SSL detected
No SSL detected. See our guide on how to get a free SSL certificate. If you do have an SSL certificate, try to reload this page over https by clicking this link: Reload over https.
Site Health StatusThe site health check shows critical information about your WordPress configuration and items that require your attention.
1 recommended improvement
Missing security headers
SSL
Your .htaccess file does not contain all recommended security headers.HTTP Strict Transport Security
Content Security Policy: Upgrade Insecure Requests
X-XSS protection
X-Content Type Options
Referrer-Policy
X-Frame-Options
Expect-CT
Lear more about security headersHi Mark,
The backend is logged in on the secured URL and I’m still getting the dialogue box, even clicking on the supplied link in the dialogue box doesn’t fix it.