Very good but documentation nonexistent and can cause problems

  • synthezoid

    (@synthezoid)


    3 months ago

    It works really well and is really easy to use, but it can be difficult to figure out the right CSP rules, and the plugin provides zero guidance. You can very easily, say, accidentally block google’s recaptcha script, if you have that installed, and since recaptcha can be set to only ask you once every 30 days, you can run for weeks with no problem and then, long after you’ve forgotten about this, you suddenly get recaptcha errors trying to log into your site, and you need to be able to troubleshoot that. So, -1 star for that. But otherwise, does exactly what it says, and you kind of need this or PageSpeed will complain nowadays. Worth the trouble, but, wish it was a little clearer, or clear at all, on how to figure out how to set it up right.

Viewing 1 replies (of 1 total)
  • Plugin Author Andrea Ferro

    (@unicorn03)

    3 months ago

    Hi @synthezoid,

    thank you for your feedback I thank you and confemme that I will update the documentation for CSP practices, I care about it being easy but especially with guides on how to configure them. Right now the documentation has links to use which CSP rules to use based on the site.

    I ask you the documentation you expect for smoother guidance for configuration on the CSP part would you like it in the plugin or here in the configurations information

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this review.