Title: Dareboost report issues
Last modified: January 25, 2018

---

# Dareboost report issues

 *  Resolved [netojose](https://wordpress.org/support/users/netojose/)
 * (@netojose)
 * [8 years, 6 months ago](https://wordpress.org/support/topic/dareboost-report-issues/)
 * Hi Sir,
 * I implemented the plugin and activated the various options but still Dareboost
   report points some issues:
 * 1. This page is exposed to “clickjacking” type attacks. On the plugin I choose“
   deny” on X-Frame-Options;
 * 2. Block access to the entire page when an XSS attack is suspected. On the plugin
   I choose 1; mode=block on X-XSS-Protection;
 * 3. Disable the auto detection of resource type. On the plugin I have “nosniff”
   on X-Content-Type-Options.
 * Also, when I run [https://securityheaders.io](https://securityheaders.io) it 
   points out that I am missing on everything: Strict-Transport-Security, X-Frame-
   Options, X-XSS-Protection, X-Content-Type-Options, Referrer-Policy.
 * Can you give me some clue on this?
 * Thanks a lot!
 * Jose
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fdareboost-report-issues%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [Dimitar Ivanov](https://wordpress.org/support/users/zinoui/)
 * (@zinoui)
 * [8 years, 6 months ago](https://wordpress.org/support/topic/dareboost-report-issues/#post-9903235)
 * Hi Jose,
 * This plugin send response headers for *.php and *.html files.
    When I try to 
   open a non-existent page like: [https://saboariaflorenza.com.br/zxd.php](https://saboariaflorenza.com.br/zxd.php)
   the headers are properly sent!
 * Are you sure you’re using the default extension (*.php) ?
 * Also, make sure you are using the “Apache” mode (see the Advanced settings).
 *  Thread Starter [netojose](https://wordpress.org/support/users/netojose/)
 * (@netojose)
 * [8 years, 6 months ago](https://wordpress.org/support/topic/dareboost-report-issues/#post-9905687)
 * Thanks a lot, yes, it was wrong on the advanced settings.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Dareboost report issues’ is closed to new replies.

 * ![](https://ps.w.org/http-headers/assets/icon-128x128.png?rev=1413576)
 * [HTTP Headers](https://wordpress.org/plugins/http-headers/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/http-headers/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/http-headers/)
 * [Active Topics](https://wordpress.org/support/plugin/http-headers/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/http-headers/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/http-headers/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [netojose](https://wordpress.org/support/users/netojose/)
 * Last activity: [8 years, 6 months ago](https://wordpress.org/support/topic/dareboost-report-issues/#post-9905687)
 * Status: resolved