- This topic has 5 replies, 2 voices, and was last updated 6 years ago by
.
-
Posts
-
Hi there!
I’m trying to implement the following security headers but when testing, the default theme code is not getting along so it breaks the site.
add_header X-Content-Type-Options nosniff;
add_header Content-Security-Policy “default-src ‘self’;”;
*add_header Strict-Transport-Security ‘max-age=31536000; includeSubDomains; preload’; *this one works just fineCan you guys advice?
Thanks!
Lead Developer
Hi there,
What about the site breaks, exactly? That code shouldn’t have any effect on the theme itself.
Hi Tom,
The whole css, images and fonts break so it loads the content on a white background.
I’m no expert when it comes to this kind of thing. It wouldn’t be directly related to the theme, I assume the same thing would happen with any theme. Are you sure the code is valid? Have you checked with your hosting?
Thanks Tom, I found this is related to caching.
Glad you got it sorted 🙂
- You must be logged in to reply to this topic.
