Support » Plugin: HTTP Headers » Woocommerce order status not automatically switching to “processing”

  • Resolved KVNHNF

    (@kvnhnf)


    Dear Dimitar,

    Thank you for creating such an awesome plugin, really happy I’ve found it!

    I had a quick question as since I implemented a few headers yesterday I noticed that my new incoming orders aren’t automatically set to “processing” anymore, even though the customer has successfully made the payment.

    The status stays as “on-hold” until I manually switch it to “processing”

    I have added the following:

    • X-Frame-Options: SAMEORIGIN
    • X-XSS-Protection: 1; mode=block
    • X-Content-Type-Options: nosniff
    • Referrer-Policy: no-referrer-when-downgrade
    • X-Permitted-Cross-Domain-Policies: none
    • Feature-Policy: accelerometer ‘none’; ambient-light-sensor ‘none’; autoplay ‘self’; camera ‘none’; encrypted-media ‘self’; fullscreen ‘self’; geolocation ‘self’; gyroscope ‘self’; magnetometer ‘none’; microphone ‘none’; midi ‘self’; payment ‘self’; picture-in-picture ‘self’; speaker ‘none’; sync-script ‘self’; sync-xhr ‘self’; unsized-media ‘self’; usb ‘none’; vertical-scroll ‘self’; vibrate ‘self’; vr ‘self’
    • Connection: keep-alive
    • Content-Encoding: br
    • Vary: Accept-Encoding, User-Agent

    Do you know which one could be causing this? I think it tempers with woocommerce REST API

    Many thanks for your help!

    Best regards

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Dimitar Ivanov

    (@zinoui)

    Hi @kvnhnf

    I’m not sure.

    Did you notice some error messages in your browser’s DevTools console or your web server log?

    KVNHNF

    (@kvnhnf)

    Dimitar,

    Thank you for your swift reply. No error showing in the console

    I also opened a ticket with WC to try to get more info

    CSP is usually the one that seems to temper features and I haven’t set it yet, only the ones I’ve listed

    I can tell that it works as it should with Stripe, and that the problem comes from Paypal IPN not being able to send the notification anymore

    Best regards

    • This reply was modified 2 months ago by KVNHNF.
    KVNHNF

    (@kvnhnf)

    [UPDATE]: As suspected, this was caused by the “X-Permitted-Cross-Domain-Policies: none” header.

    It tempers with Paypal IPN notifications (which are XML)

    Best regards

    Plugin Author Dimitar Ivanov

    (@zinoui)

    I’m glad to see you’ve resolved the issue.

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.