Security Headers

Support and Discussion General Discussion
1

I have followed this guide and it works well: https://cyberpanel.net/docs/how-to-set-hsts-header-strict-transport-security-using-cyberpanel-openlitespeed/

How do we add in additional security headers e.g. X-XSS-Protection 1;mode=block?

Nothing I have tried works.

2

Hi,

You need add this:

X-XSS-Protection 1;mode=block

to: Header Operations in OLS>Virtual Host>domain>Context>Header Operations

I added all my headers here and get A in securityheaders.com

Regards.

3

Hi

I tried that before but I put - /home/$VH_NAME/public_html - in Location.
Should that be there or should it be blank?

Also, can you please send me what you use for security headers?

I saved the OLS>Virtual Host>domain>Context leaving Location blank and it crashed my server so I had to restart OLS. I don’t know if it was because I left out the Location or my headers were wrong.

4

I did everything, it worked. Have you tried it?

5

can you add the link again on how to get it done please