• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Question Permanet SEO redirect to https

Dave W

Regular Pleskian
Greetings,

In creating a Service Plan we would like to give our clients the option of using the Permanent SEO-safe 301 redirect from HTTP to HTTPS option or not.

To enable this we need to set " Setup of potentially insecure web scripting options that override provider's policy" in the Plans permissions.

But as attached the comment references " it is recommended to deny this permission for better site isolation. "

What are the risks here?

plesk.JPG

Regards
Dave_W
 
Plesk provides an ability to force subscriptions to use specific server-wide site isolation settings and the option "Setup of potentially insecure web scripting options that override provider's policy" allows customers to override them. More details are provided on this documentation page:
Enhancing Security
 
Back
Top