Missing Headers & wpmejsSettings

  • Hello,

    I just have a couple of questions about this handy plugin.

    1. When checking my site using securityheaders.com I am missing:
    Referrer-Policy
    Permissions-Policy
    These both do not exist in HMWP, is it possible to add these?

    2. In my source code I have the following: 

    <script id='mediaelement-js-extra'>
var _wpmejsSettings = {"pluginPath":"\/wp-includes\/js\/mediaelement\/","classPrefix":"mejs-","stretching":"responsive"};
</script>

    Is it possible to remove/hide this as it shows the path to wp-includes?

    Thank you.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author John Darrel

    (@johndarrel)

    Hi @chickendipper,

    Thanks for the questions.

    1. The two headers are not present in the free version. Only on the premium version of the plugin but you can use .htaccess to add them to your website.

    2. If there are URLs that remain in the source code, you can use the URL Mapping to change them like:

    \/wp-includes\/js\/mediaelement\/ => \/newpathmedia\/

    Normally, the paths should be absolute in JS in order to be changed, you can try also with:

    Hide My WP > Tweaks > Change Options > Change Relative URLs to Absolute URLs

    https://hidemywpghost.com/kb/activate-security-tweaks/#fix_relative_urls

    Best, John

    Thread Starter chickendipper

    (@chickendipper)

    Hi,

    Thanks for the advice.

    1. Will this still be possible with the premium version if I am using ngnix?

    2. I tried \/wp-includes\/js\/mediaelement\/ => \/newpathmedia\/ but the paths have the backslashes remove so end up:

    /wp-includes/js/mediaelement/ => /newpathmedia/

    also tried

    Hide My WP > Tweaks > Change Options > Change Relative URLs to Absolute URLs

    Doesn’t seem to help.

    Thank you.

    Plugin Author John Darrel

    (@johndarrel)

    Hi,

    1. Yes, in the premium version you can add these headers.

    2. I’ll send this to the devs to check and see why the paths is not changed. Did you also try to add in URL Mapping /wp-content => /core and /mediaelement => /pathmedia

    John

    Thread Starter chickendipper

    (@chickendipper)

    Hi,

    I have tried mapping /wp-includes => /lib as I think this is what you meant.
    This breaks the site.

    /mediaelement => /pathmedia has no effect on this specific text/code.

    Thanks again.

    Plugin Author John Darrel

    (@johndarrel)

    Sorry for the delay.

    I wanted to let you know that the devs are still working on this and will let you know when we have an update by tomorrow or Friday.

    John

    Plugin Author John Darrel

    (@johndarrel)

    Hi,

    Please upgrade HMWP to the last version and check again. We added support for relative paths in script code.

    Let me know if it’s working for too.

    Best, John

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Missing Headers & wpmejsSettings’ is closed to new replies.