Tagged: Browser Cache
- AuthorPosts
- November 28, 2022 at 11:34 am #70753MARK STONIERGuest
Hi,
Purchased This Cache product. But every time I activate the plugin under WordPress, my security headers all start to fail via securityheader.com / serpworkx.com.Plus Google page speed test works once then stops displaying data.
I have to disactivate W3 total cache, and replace it with a free one (WP Fastest Cache) and security headers come back reporting A+
Any quick pointers would be great 🙂
Cheers
MarkSNovember 28, 2022 at 11:36 am #70987Marko VasiljevicKeymasterHello Mark,
I’ve checked your website and indeed the security headers are missing. I can also see that the W3 Total cache is not enabled at the moment.
You can set up the Security headers in the Performance>Browser Cache, and scroll down to the Security headers section. There you can enable the headers you want, and make sure to save all settings and purge the cache.Thanks!
November 29, 2022 at 6:36 am #71041MARK STONIERGuestHI.
O.K removed all non essential plugins, simple SSL etc
removed this from .Htaccess
<ifModule mod_headers.c>
Header set Strict-Transport-Security “max-age=31536000; includeSubDomains;preload” env=HTTPS
Header set X-XSS-Protection “0; mode=block”
Header set X-Content-Type-Options nosniff
Header set X-Frame-Options “SAMEORIGIN”
Header set Referrer-Policy: strict-origin-when-cross-origin
Header set Content-Security-Policy “default-src ‘none’; script-src ‘self’; connect-src ‘self’; img-src ‘self’; style-src ‘self’;”
Header set Permissions-Policy “geolocation=self”
</ifModule>reinstalled w3 total cache
reinstalled latest wordpressBut still w3 cache not handling the security headers
reinstalled w3 cache set default values
still not working as requiredany more ideas before I request money back ??
MarkS
November 29, 2022 at 6:36 am #71081MARK STONIERGuestHI Marko,
Have tried again and still W3 does not want to handle security headers even once confiugred.Have stripped WordPress install back to minimoon plugins, reinstalled WP.
Reinstalled W3 checking .htaccess is being modified by W3
But still not workingMarkS
November 29, 2022 at 6:37 am #71088Marko VasiljevicKeymasterHello Mark,
Thank you for your feedback.
So the rules you’ve had for the security headers may be causing the conflict with the W3TC rules.
Can you please drop us a note directly via the plugin in Performance>Support>Bug report so we can check this for you?
Thanks! - AuthorPosts
- The topic ‘Security Headers fail under 3W Total cache’ is closed to new replies.