Thank you very much for this useful plugin that has been working perfectly for years and has never caused me the slightest issue during all this time.

I create this topic because my browser’s console (Chrome) is showing an error with this message:

Failed to set referrer policy: The value ” is not one of ‘no-referrer’, ‘no-referrer-when-downgrade’, ‘origin’, ‘origin-when-cross-origin’, ‘same-origin’, ‘strict-origin’, ‘strict-origin-when-cross-origin’, or ‘unsafe-url’. The referrer policy has been left unchanged.

Right after this line:

Asset CleanUp : ? Mode en ligne ? (le mode test n’est pas activé, ainsi, toutes les modifications de l’extension sont visibles pour tout le monde : vous, l’administrateur/administratrice connecté·e et les visiteurs/visiteuses)

Is Asset Cleanup involved? Do you know what I should do to solve the problem?

Thanks in advance for your help.

Best regards,
Florence.

<IfModule mod_headers.c>
     ...
     Header set Referrer-Policy: no-referrer
     Header set Set-Cookie HttpOnly;Secure
</IfModule>

but if i set these two statements, your plugin can no longer save the cookies in the browser.

I just have a couple of questions about this handy plugin.

1. When checking my site using securityheaders.com I am missing:
Referrer-Policy
Permissions-Policy
These both do not exist in HMWP, is it possible to add these?

2. In my source code I have the following:

<script id='mediaelement-js-extra'>
var _wpmejsSettings = {"pluginPath":"\/wp-includes\/js\/mediaelement\/","classPrefix":"mejs-","stretching":"responsive"};
</script>

Is it possible to remove/hide this as it shows the path to wp-includes?

Thank you.

1. I want to add referrerpolicy to external URLs like this:
<a href="https://example.com" referrerpolicy="origin">
Is it possible with your plugin?

2. WPEL considers PrettyLinks generated links – internal links. What is the right way of making it consider as external links.

Short description :
When WP-Matomo Integration plugin is activated, the HTTP header Referrer policy for a vimeo iframe is changed from “strict-origin-when-cross-origin” to “same-origin”, preventing the Vimeo video to be displayed on the page (with the vimeo specific domain restriction for embedding).

Long description :
Some vimeo embedded videos stopped working on my wordpress website after I installed WP-Matomo Integration. The videos are only allowed to be embed on the website domain (it’s a feature from Vimeo). First, I thought it was coming from Vimeo and contacted their support. We identified the problem was coming from the referrer policy HTTP header for the iframe (used to embed the video) : same-origin whereas Vimeo needs cross-origin.

So the problem was coming from my wordpress instance and I made the link with the recent installation of the plugin WP-Matomo Integration. I did the test immediately, disabled the plugin WP-Matomo Integration, reloaded the page, and the vimeo was embedded again (iframe HTTP header Referrer Policy: strict-origin-when-cross-origin). I re-enabled the plugin, the video could not be displayed (iframe HTTP header Referrer Policy: same-origin).

Weirdly enough, on some other pages, the embedded videos are displayed despite the fact that the plugin is enabled.

I could not find anything relevant in the plugin settings (pretty new to Matomo though) and Matomo tracking seems to be working fine.

Any ideas? A setting I can change?

Thanks!

Info:
WordPress 5.7.2
apocalypse meow version 21.7.2

Password tech (wordpress built-in)

Failed to set referrer policy: The value ” is not one of ‘no-referrer’,
‘no-referrer-when-downgrade’, ‘origin’, ‘origin-when-cross-origin’,
‘same-origin’, ‘strict-origin’, ‘strict-origin-when-cross-origin’,
or ‘unsafe-url’. The referrer policy has been left unchanged.

Is there a way to fix this issue?

Everything was working fine until a few days ago, today I performed an analysis with https://securityheaders.com/ and it results in me only being active Referrer-Policy.

I’ll clarify that I haven’t made any changes since it was working well.

If I can find the solution, I’ll publish it here.

Thank you very much already.

I’m using WPX Hosting + W3 Total Cache with my host’s default (optimal) settings. However, these settings weren’t updated since 2018.

When I check the dev console in Chrome for my site, I see the “Failed to set referrer policy” error.

I wonder, should I set the “Referrer Policy” to “no-referrer-when-downgrade”?

Also, will this have any effects on my affiliate links and ads?

Thank you.

The way I understand it, the user-agent either sends this or not… In your code there is no check, so when user-agent doesn’t send it throws an error. Maybe build in a check?