WPIntell

Source evidence

Multisite network configuration?

Security Headers · support · 2017-10-05T13:13:00+00:00

complaintsentiment
highseverity
1.0relevance
2replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 16 rows with source links

31.2% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

11 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
Michael unresolved
Is it possible to configure defaults for the “Security Headers” plugin across all sites in a multisite network? I am not seeing any settings pages on the Network Admin dashboard. We have 481 sites in our network, and configuring each one separately would not be practical. Hi Michael, I can see that could be painful, I will have to go learn more about multisite support first. Not used multisite with WP at all. If it is your server you have the option to configure these headers at the webserver level, which is most cases is probably preferable security-wise. Although I guess if you are finding you need to switch off one or two due to third party plugins doing odd things, then the Security Headers plugin could be useful in making that a point and click exercise for exceptions. Can I ask do you have any other plugins with good multi-site support? So I can plagarise ruthlessly if needed. Sorry for delay, had a brief look around and found little about multi-site support, so I won’t be doing this for 1.0. I did email the plugins team to ask if they have any good introductory material.

Comments

2 shown
SimonRWaters 2017-10-09T10:09:00+00:00

Hi Michael, I can see that could be painful, I will have to go learn more about multisite support first. Not used multisite with WP at all. If it is your server you have the option to configure these headers at the webserver level, which is most cases is probably preferable security-wise. Although I guess if you are finding you need to switch off one or two due to third party plugins doing odd things, then the Security Headers plugin could be useful in making that a point and click exercise for exceptions. Can I ask do you have any other plugins with good multi-site support? So I can plagarise ruthlessly if needed.

SimonRWaters 2018-02-20T18:40:00+00:00

Sorry for delay, had a brief look around and found little about multi-site support, so I won’t be doing this for 1.0. I did email the plugins team to ask if they have any good introductory material.