arthurdent2003

It seems to work now – I guess it has something to do with the way the cache is built. Maybe there is a fix that it always works. For now: A+ on securityheaders.com / but still a D on Mozilla Observatory – not sure why ;).

I found this: https://www.ads-software.com/support/topic/how-to-add-security-headers-with-wpfc/ – I didn’t implement it, but maybe the way the htaccess is used can be optimised?

• This reply was modified 2 years ago by arthurdent2003.

Hi Andrea, thanks.

WP Fastest Cache – not SuperCache.

• This reply was modified 2 years ago by arthurdent2003.

Hey Andrea @unicorn03 ! Thanks!

I came up to the problem where I need to remove the “Allow-Methods DELETE etc. from the headers. My idea is to override the HEADER Output by using something like

Header set Access-Control-Allow-Methods “GET,PUT,POST”

via filter. But at the moment I don’t know the best way to do so. I changed the code directly in the Plugin and I am getting the correct output – but of course this is not the best way. Do you have an idea how to make it work?

Override via function in functions.php or better a little plugin to do this?

Thanks!

I tried this – but it doesn’t work:

add_filter('wp_headers','Headers_Security_Advanced_HSTS_WP_Headers_custom', 99, 12);

function Headers_Security_Advanced_HSTS_WP_Headers_custom($headers) { 
// Do your logics here
	  $headers['Access-Control-Allow-Methods'] = 'GET,PUT,POST';

	  return $headers;
}

add_filter( 'wp_headers', 'Headers_Security_Advanced_HSTS_WP_Headers_custom' );

Maybe I am missing something?

• This reply was modified 2 years, 7 months ago by arthurdent2003.
• This reply was modified 2 years, 7 months ago by arthurdent2003.
• This reply was modified 2 years, 7 months ago by arthurdent2003.

Hi Andrea,
I just realised, that with the latets update x-frame-options were set to allowall – could this be or is something wrong on my side?

Perfect! Works now. Thank you!

Thanks for the info

im8 really did it. yeah!

cool! worked – thank you sardbaba for the info!

AD

Hi Sardbaba, thanks for the tip. Do you know if this also fixes the checkoutpage problem?

Thank you very much.

AD

yes – I am searching for a solution, too.

Also the “mini-cart” isn’t changing in my case. It stays in the main language. On the checkoutpage, the selected language appears for a second, but then switches back to mainlanguage.

A fix would be great!

Also posted it on the qt forums:


Thanks!
AD

Hi OddOneOut –

but why is there also a “post.xml” showing when I go to “sitemap.xml”?
“BWP Google XML Sitemaps Error: post.xml does not have any item.”

Why can’t I just deactivate post.xml?

thank you.

AD

ok thank you!

oh – and I am trying it for “in-post” pagination! Next Page in a post…

Hello Héctor,

will it also be possible to show popular posts of a custom post type with “views” insteaf of comments?

thx!

AD