Themes
All themesNo clustered themes yet.
Market
permissions policy
Proof Health
Open evidenceCommercial opportunities need traceable source links before they are treated as build-worthy.
38 / 38
rows with source links
100.0% of this page's analysis has direct source links.
0
build-decision rows missing links
0 rows here require auditable proof before promotion.
0
rows with no attached evidence
0 rows have source counts but still need direct links.
Competitors
1 shown
Security Header Generator
500 installs · 4.8
praise owner
-100.0%momentum
24.7weakness
2/6pain/praise
Pain still appears around security, bugs despite praise for quality, easy.
Evidence
Open evidence explorer
complaint
[NOTICE] Updating to Version 6
[NOTICE] Updating to Version 6: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · [NOTICE] Updating to Version 6 Heads up: Settings migration in version 5.6.03 If you’re updating from a previous version, please read this before updating. mixed Can’t edit Font Source fieldCan’t edit Font Source field: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · I’ve tried: Entering the full font URL Using your recommended wildcard format Deleting default entries After saving, my entries disappear, and default values reappear. mixed Problem with caching pluginProblem with caching plugin: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Unfortunately, I have a challenge working with the WP Fastest Cahce plugin. mixed No response from command line commandNo response from command line command: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · No response from command line command Our dev site is hosted with WP Engine. mixed PHP WarningsPHP Warnings: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · PHP Warnings Hello Kevin, Using WordPress 6.8 with PHP 8.3, I have the following PHP warnings flooding the wp_debug log file: PHP Warning: Undefined array key "fp_bluetooth_src_domain" in /wp-content/plugins/security-header-generator/work/inc/kcp-cspgen-headers.php on line 791 PHP Warning: Undefined array key "fp_captured-surface-control_src_domain" in /wp-c mixed Does the plugin require update to .htaccess?Does the plugin require update to .htaccess?: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · I am a little confused about how this plugin works. mixed hash, strict-dynamic, nonce, report-sample, report-to directiveshash, strict-dynamic, nonce, report-sample, report-to directives: users show security, compatibility, missing feature pain that may indicate a product gap.
Security Header Generator · Edit: I noticed that hash, strict-dynamic, nonce, report-sample directives are also missing. mixed Menu item “Security Headers” not visibleMenu item “Security Headers” not visible: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Menu item “Security Headers” not visible WordPress version: 6.6.1-de_DE Security Header Generator version: 5.1.29 Themes: “Responsive” on one website, “ExS Medic” on two other websites Problem: After logging into my three WordPress self-hosted websites as an administrator, the “Security Headers” menu item in the left menu is no longer visible. mixed Strict-Transport-SecurityStrict-Transport-Security: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Strict-Transport-Security Hi I’m working through a pen test report and some file paths have been flagged as not returning a Strict-Transport-Security. mixed NothingNothing: users show security, missing feature, support pain that may indicate a product gap.
Security Header Generator · Nothing Hi Thank you for the free CSP generator plugin however, seems it did not work I installed the plugin, login to root and move the website’s root folder, run the command, >> Success Everyting is ok, clear cache, check at securityheaders.com then nothing You didn’t have any documents for users, no FAQ too. mixed Error message on loading siteError message on loading site: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Error message on loading site I just installed your plugin and after a few minutes of reading and testing everything seems to work fine. mixed Error message in a special caseError message in a special case: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Error message in a special case Today I came across a special error message: WordPress-Version 6.1.1 Aktives Theme: Twenty Seventeen (Version 3.1) Aktuelles Plugin: Security Header Generator (Version 3.6.02) PHP-Version 8.0.28 Ein Fehler vom Typ E_ERROR wurde in der Zeile 701 der Datei /homepage/wp-content/plugins/security-header-generator/work/inc/kcp-cspge mixed Undefined array key “apply_child_override”Undefined array key “apply_child_override”: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Undefined array key “apply_child_override” When I updated the Kinsta server to PHP version to 8.3, I got bombarded of this error. mixed Content Security Headers – setting valuesContent Security Headers – setting values: users show security, bugs, missing feature pain that may indicate a product gap.
Security Header Generator · Content Security Headers – setting values Hi, how do I set Content-Security-Policy: default-src ‘self’ example.com *.example.com? question Do you want to force downloads?Do you want to force downloads?: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · MIME type is correct but the issue is on their end. mixed CLI command generates errorCLI command generates error: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · CLI command generates error I used WinSCP to run the CLI command “wp csp generate” and it appears to start working before generating the error “invalid file ID”. mixed Permissions Policy DirectivesPermissions Policy Directives: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Permissions Policy Directives Hello Kevin, I have WordPress 6.8.1 with PHP 8.3 and am using securityheaders.com to obtain a report on the site. mixed Attempt to read property “ID” on null in kcp-cspgen-cli-process.phpAttempt to read property “ID” on null in kcp-cspgen-cli-process.php: users show security, bugs, compatibility pain that may indicate a product gap.
Security Header Generator · Attempt to read property “ID” on null in kcp-cspgen-cli-process.php I’m using wordpress 6.3.1 with Security Header Generator 4.0.01, when i run “wp csp generate” i get the following error: Warning: We have started processing the site. mixed blob:blob:: users show security, compatibility, support pain that may indicate a product gap.
Security Header Generator · child-src is not deprecated as of yet, and still has full browser support: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src I do see some articles showing it was, however, it has since been un-deprecated as of December 2018 Interestingly enough though, W3C has marked frame-src as deprecated… as of July 31st: https:/ complaint ExcellentExcellent: users show security pain that may indicate a product gap.
Security Header Generator · Excellent Works perfectly. mixed X-Content-Security-Policy no longer neededX-Content-Security-Policy no longer needed: users show security, setup pain that may indicate a product gap.
Security Header Generator · X-Content-Security-Policy no longer needed Hola, thanks for the plugin. mixed PHP warning: Bool treated as arrayPHP warning: Bool treated as array: users show security, compatibility pain that may indicate a product gap.
Security Header Generator · PHP warning: Bool treated as array Many of these in my log: PHP Warning: Trying to access array offset on value of type bool in */wp-content/plugins/security-header-generator/work/inc/kcp-cspgen-common.php on line 73 Suggest just replacing $_opts['apply_child_override'] with (appending a null coalescing operator) $_opts['apply_child_override'] ?? mixed Enforce Certificate Transparency (Expect-CT) is deprecatedEnforce Certificate Transparency (Expect-CT) is deprecated: users show security, missing feature pain that may indicate a product gap.
Security Header Generator · Enforce Certificate Transparency (Expect-CT) is deprecated Under Standard security headers –> Enforce certificate transparency: this option should be removed because Expect-CT header is already deprecated . neutral PHP 8.1 Deprecated in admin.php?page=wpsh_settingsPHP 8.1 Deprecated in admin.php?page=wpsh_settings: users show security, compatibility, missing feature pain that may indicate a product gap.
Security Header Generator · PHP 8.1 Deprecated in admin.php?page=wpsh_settings rtrim(): Passing null to parameter #1 ($string) of type string is deprecated in wp-content/plugins/security-header-generator/work/inc/kcp-cspgen-headers.php:207 rtrim(): Passing null to parameter #1 ($string) of type string is deprecated in wp-content/plugins/security-header-generator/work/inc/kcp-cspgen-hea neutral X-XSS-Protection HeaderX-XSS-Protection Header: users show security, missing feature, support pain that may indicate a product gap.
Security Header Generator · X-XSS-Protection Header Hi, the plugin in seems to cover all the major Security headers, but I can’t see a way to set X-XSS-Protection? neutral Implementation tab not presentImplementation tab not present: users show security, setup pain that may indicate a product gap.
Security Header Generator · Implementation tab not present Hi there, I’m trying to configure my security headers with your plugin, and you refer to the Implementation tab to apply the headers, but the Implementation tab is not present? praise Necessary additions for security and trustNecessary additions for security and trust: users show security pain that may indicate a product gap.
Security Header Generator · Necessary additions for security and trust Recommend this Recommend this =) Appreciate it. mixed Documentation of changesDocumentation of changes: users show bugs, compatibility, missing feature pain that may indicate a product gap.
Security Header Generator · Documentation of changes Is there a site with more explanatory information about the updates? mixed Empty CSP headers directivesEmpty CSP headers directives: users show missing feature, support, setup pain that may indicate a product gap.
Security Header Generator · Empty CSP headers directives Hi, I have to add the CSP headers to the site so I have installed the plugin. complaint The way to request supportThe way to request support: users show bugs, support pain that may indicate a product gap.
Security Header Generator · The way to request support If you have issues and need help, the best way anyone can help you is if you post all pertinent information with your help request. mixed [FEATURES] Coming Soon[FEATURES] Coming Soon: users show bugs, missing feature pain that may indicate a product gap.
Security Header Generator · [FEATURES] Coming Soon In the works Attaching to Cloudlare’s API I am reading up on Sucuri, Fastly, Cloudfront, GC CDN, Azure CDN, Akamai to see if there are similar “issues” I’ve come across, if so I’ll work on a similar method to implement In planning Network Settings Full network umbrella control network overrides child site overrides In the works Attachi neutral Confict with MailpoetConfict with Mailpoet: users show bugs, compatibility, support pain that may indicate a product gap.
Security Header Generator · Confict with Mailpoet The plugin has some sort of conflict with Mailpoet. praise Great PluginGreat Plugin: users show bugs, missing feature pain that may indicate a product gap.
Security Header Generator · Great Plugin I was using another plugin that worked well overall, but it had a few limitations — the biggest being the inability to exclude the admin area from the policy. praise Good JobGood Job: users show setup pain that may indicate a product gap.
Security Header Generator · Good Job Easy and Fast configuration. praise Perfect !Perfect !: users praise reliable, quality, which suggests what competitors already do well.
Security Header Generator · Perfect ! praise Very great effectVery great effect: users praise quality, which suggests what competitors already do well.
Security Header Generator · Very great effect The plugin does what it promises.