WPIntell

Source evidence

Include HSTS support for fixed files like .css

HTTP Headers · support · 2024-11-12T16:53:00+00:00

HTTP Headers plugin evidence original source source API
complaintsentiment
highseverity
0.98relevance
0replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

2 / 19 rows with source links

10.5% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

17 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
dredgie unresolved
Hello, all – I’m trying to figure out why HSTS is only applied to .php and .HTML files. My security auditors are failing the site as .css is still unprotected. location ~* .(php|html)$ { add_header Strict-Transport-Security “max-age=31536000; includeSubDomains; preload”; } In the ‘location’ was not included, every file would be covered, as I understand. It looked like I could edit this (manual setup) but I couldn’t make any changes. Anyone know what I’m missing, here? Thank you!

Comments

0 shown

No comments were stored for this source.