• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Question Permanet SEO redirect to https

Dave W

Regular Pleskian
Greetings,

In creating a Service Plan we would like to give our clients the option of using the Permanent SEO-safe 301 redirect from HTTP to HTTPS option or not.

To enable this we need to set " Setup of potentially insecure web scripting options that override provider's policy" in the Plans permissions.

But as attached the comment references " it is recommended to deny this permission for better site isolation. "

What are the risks here?

plesk.JPG

Regards
Dave_W
 
Plesk provides an ability to force subscriptions to use specific server-wide site isolation settings and the option "Setup of potentially insecure web scripting options that override provider's policy" allows customers to override them. More details are provided on this documentation page:
Enhancing Security
 
Back
Top