• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Issue Set Webserver Option Globally

Where can I set Webserver Options like Header in Plesk globally?
How can I overwirte existing configs on each Site?

Where can I set the absolutely standard Security Headers?
Like

Code:
add_header X-Frame-Options "SAMEORIGIN" always;
add_header x-xss-protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Download-Options "noopen" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "all" always;
add_header Expect-CT 'max-age=600, enforce';
add_header X-Powered-By Cachify;
add_header Cache-Control 'public, max-age=31536000';

kind regards
 
Back
Top