New to the community? Start here

[Defender Pro] Defender won't stay resolved

Hi,
since the new update there are options to force specific header values.
The new tweaks will apply, but when i reload the page they are shown again as issues.
These are the tweaks not working properly:

X-Content-Type-Options Security Header
Feature-Policy Security Header
Referrer Policy Security Header
Strict Transport Security Header
X-Frame-Options Security Header
X-XSS-Protection Security Header

Firstly i thought this must be an issue with my hosting provider (flywheel) but on other sites its working as intended.

Thu, 17 Oct 2019 7:16:02
More Defender Pro discussions
Defender Pro
  • Adam
    • Support Gorilla

    Hello Vortech

    I hope you’re well today!

    It might be an issue in case of some staging sites and there might also be a detection problem (that’s going to be addressed soon, in one of the upcoming updates) if the site’s behind HTTP auth and/or in a coming soon/maintenance mode that “overwrites WP” (that sounds strange but some of the plugins of that kind are very “forcefully” sending just bare page stripped out of anything that WP would normally send).

    But if that’s not the case and, additionally, other sites that are on the same/similar hosting are not affected, that would suggest that it’s more specific to the site configuration. I’d like to take a closer look at the case so would you mind enabling support access to the affected site for me?

    To do so, please go to the “WPMU DEV -> Support -> Support Access” page in the site’s back-end, click on “Grant support access” button there and let me know here once it’s done as I won’t be notified automatically.

    I’ll then check the site and see what should be done next to address the issue.

    Best regards,
    Adam

  • Predrag Dubajic
    • Support

    Hi Vortech ,

    Thanks for granting access, I’ve checked your site and there are quite a few console errors in your backend and they seem to be coming from Elementor.
    These console errors caused an issue with Defender updating the information on Security Tweaks page so after I disabled Elementor and refreshed the Security Tweaks page all were resolved, which means that they were already applied but due to the console error Defender wasn’t able to return correct information.

    Of course, I have re-enabled Elementor right after that but I would suggest getting in touch with their support to see what could be causing those errors.

    Best regards,
    Predrag