• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Please beaware of a breaking change in the REST API on the next Plesk release (18.0.62).
    Starting from Plesk Obsidian 18.0.62, requests to REST API containing the Content-Type header with a media-type directive other than “application/json” will result in the HTTP “415 Unsupported Media Type” client error response code. Read more here

Question Permanet SEO redirect to https

Dave W

Regular Pleskian
Greetings,

In creating a Service Plan we would like to give our clients the option of using the Permanent SEO-safe 301 redirect from HTTP to HTTPS option or not.

To enable this we need to set " Setup of potentially insecure web scripting options that override provider's policy" in the Plans permissions.

But as attached the comment references " it is recommended to deny this permission for better site isolation. "

What are the risks here?

plesk.JPG

Regards
Dave_W
 
Plesk provides an ability to force subscriptions to use specific server-wide site isolation settings and the option "Setup of potentially insecure web scripting options that override provider's policy" allows customers to override them. More details are provided on this documentation page:
Enhancing Security
 
Back
Top