-
Posts
-
Hi,
Purchased This Cache product. But every time I activate the plugin under WordPress, my security headers all start to fail via securityheader.com / serpworkx.com.Plus Google page speed test works once then stops displaying data.
I have to disactivate W3 total cache, and replace it with a free one (WP Fastest Cache) and security headers come back reporting A+
Any quick pointers would be great 🙂
Cheers
MarkSHello Mark,
I’ve checked your website and indeed the security headers are missing. I can also see that the W3 Total cache is not enabled at the moment.
You can set up the Security headers in the Performance>Browser Cache, and scroll down to the Security headers section. There you can enable the headers you want, and make sure to save all settings and purge the cache.Thanks!
HI.
O.K removed all non essential plugins, simple SSL etc
removed this from .Htaccess
<ifModule mod_headers.c>
Header set Strict-Transport-Security “max-age=31536000; includeSubDomains;preload” env=HTTPS
Header set X-XSS-Protection “0; mode=block”
Header set X-Content-Type-Options nosniff
Header set X-Frame-Options “SAMEORIGIN”
Header set Referrer-Policy: strict-origin-when-cross-origin
Header set Content-Security-Policy “default-src ‘none’; script-src ‘self’; connect-src ‘self’; img-src ‘self’; style-src ‘self’;”
Header set Permissions-Policy “geolocation=self”
</ifModule>reinstalled w3 total cache
reinstalled latest wordpressBut still w3 cache not handling the security headers
reinstalled w3 cache set default values
still not working as requiredany more ideas before I request money back ??
MarkS
HI Marko,
Have tried again and still W3 does not want to handle security headers even once confiugred.Have stripped WordPress install back to minimoon plugins, reinstalled WP.
Reinstalled W3 checking .htaccess is being modified by W3
But still not workingMarkS
- The topic ‘Security Headers fail under 3W Total cache’ is closed to new replies.
