Site logo

Archived topic

Missing security header

2 replies · Started by Richard on April 12, 2019

Viewing posts 1–3 of 3

I'm using this plugin with GeneratePress https://wordpress.org/plugins/http-security/

When scanning with Sucuri Site Check, I get the warning below. I do not get this warning with this plugin on other themes I use; and I'm wondering If there is something in the GeneratePress theme that would cause this?

Warning:

Missing security header for XSS Protection. Affected pages:
https://domain.com/wp-content/themes/generatepress/
https://domain.com/wp-includes/css/

Missing security header to prevent Content Type sniffing. Affected pages:
https://domain.com/wp-content/themes/generatepress/
https://domain.com/wp-includes/css/

Missing Strict-Transport-Security security header. Affected pages:
https://domain.com/wp-content/themes/generatepress/
https://domain.com/wp-includes/css/

Thank you

Update:

I am getting the same warning on other themes I use.

Might be iThemes Security blocking the plugin in these dirs.

Thank you

I believe Headers usually need to be set on the server side of things, but I'm not 100% sure.

This archived topic is closed to new replies.