Source evidence

Empty CSP headers directives

Security Header Generator · support · 2024-12-24T11:36:00+00:00

Security Header Generator plugin evidence original source source API

mixedsentiment

mediumseverity

0.78relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

mayank5oct resolved

Hi, I have to add the CSP headers to the site so I have installed the plugin. I have added required CSP directive values in the admin. But on the frontend CSP header is available but not the directives. It shows empty CSP headers. PS: Unfortunately I am not able to share the website link. Thanks & Regards, Mayank Saini I need more information. What browser? What is your hosting? Do you run through Cloudflare? Is your hosting setting headers? Otherwise, I’ll need the link. Understand please @mayank5oct You may not be able to be helped. Out of 600+ installs, you are the only one that this is not getting set for, so something is either going on with your site, your site’s configuration, or your hosting. no response. closing

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Empty CSP headers directives: users show missing feature, support, setup pain that may indicate a product gap.

Evidence quote: Empty CSP headers directives Hi, I have to add the CSP headers to the site so I have installed the plugin.

Affected feature: form

missing feature support setup value

Plugin

API

Security Header Generator

500 active installs · 26.9K downloads · rating 96.0

content security policy permissions permissions policy security security headers

Comments

3 shown

Kevin Pirnie 2024-12-24T12:12:00+00:00

I need more information. What browser? What is your hosting? Do you run through Cloudflare? Is your hosting setting headers? Otherwise, I’ll need the link.

Kevin Pirnie 2024-12-24T12:14:00+00:00

Understand please @mayank5oct You may not be able to be helped. Out of 600+ installs, you are the only one that this is not getting set for, so something is either going on with your site, your site’s configuration, or your hosting.

Kevin Pirnie 2025-03-26T13:23:00+00:00

no response. closing