WPIntell

Source evidence

Quoting bugs

Security Headers · support · 2019-12-10T08:21:00+00:00

complaintsentiment
highseverity
0.97relevance
0replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 16 rows with source links

31.2% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

11 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
srtydrts unresolved
Hello, there is a little bug in the plugin. 1) In referrer policy, values are extra quoted For example in chrome it says: Failed to set referrer policy: The value ‘”origin”‘ is not one of ‘no-referrer’, ‘no-referrer-when-downgrade’, ‘origin’, ‘origin-when-cross-origin’, ‘same-origin’, ‘strict-origin’, ‘strict-origin-when-cross-origin’, or ‘unsafe-url’. The referrer policy has been left unchanged. The solution probably is to replace this: return $htaccess ? ‘Referrer-Policy “‘.$policy.'”‘ : ‘Referrer-Policy: “‘.$policy.'”‘; by this: return $htaccess ? ‘Referrer-Policy ‘.$policy : ‘Referrer-Policy: ‘.$policy; in core/objects/core.headers.php file 2) http headers values should not be quoted. I. e. the lattter one is correct. I think the first might not be understood strict-transport-security: “max-age=31536000” strict-transport-security: max-age=31536000 3) Also, how about adding “preload” option for “strict-transport-security” header?

Comments

0 shown

No comments were stored for this source.