[Resolved] Security header for XSS Protection

[Gunter Tannhaeuser]

Hello,

we chekced our website with an external Serivce, theyre report tellus some “problems” …

Missing security header for XSS Protection on https://XXXXXXX.xx/wp-content/themes/generatepress/.

Missing security header to prevent Content Type sniffing on https://XXXXXXX.xx/wp-content/themes/generatepress/.

Missing Strict-Transport-Security security header on https://XXXXXXX.xx/wp-content/themes/generatepress/.

I am not a professional WP-Nerd, so i feel a little bit unsafe about this

[David]

Hi there,

i can’t see these errors on the site. What external service was it you used?

[Gunter Tannhaeuser]

Hello,

this was funny , i cant find the service again. I learned: Stealth mode in my browser has a dark side 😐

Perhabs they only want to frighten us to sell a service? Whatever, if you say you cant find it i am happy 🙂

Thank you very much!

[David]

So if you want to check, you can open the Audit tool in Chrome (Right Click > Inspect and open the Audit in the console, may be hidden in the 3 dot menu). Run that and it will show issues under best practices. Some of the errors are just warnings a lot of which are false positives.

But i can’t see the XSS issues raised. Let me know if anything comes up.

[Author]

Posts