Title: dny24's Replies | WordPress.org

---

# dny24

  [  ](https://wordpress.org/support/users/dny24/)

 *   [Profile](https://wordpress.org/support/users/dny24/)
 *   [Topics Started](https://wordpress.org/support/users/dny24/topics/)
 *   [Replies Created](https://wordpress.org/support/users/dny24/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/dny24/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/dny24/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/dny24/engagements/)
 *   [Favorites](https://wordpress.org/support/users/dny24/favorites/)

 Search replies:

## Forum Replies Created

Viewing 2 replies - 1 through 2 (of 2 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[HTTP headers to improve web site security] Little bug in base-uri](https://wordpress.org/support/topic/little-bug-in-base-uri/)
 *  Thread Starter [dny24](https://wordpress.org/support/users/dny24/)
 * (@dny24)
 * [6 years, 2 months ago](https://wordpress.org/support/topic/little-bug-in-base-uri/#post-12937153)
 * PS Carl,
 * I found something else:
    For Feature policy, normal code is – for instance – 
   Header set Expect-CT “max-age=86400,enforce”
 * HTTP Security Options writes it in reverse:
    Header set Expect-CT: enforce; max-
   age=86400;
 * This gives errors (misconfiguration or weakness)
    when using website security
   test.
 * Of course this is intended as ‘positive critique constructive’.
 * Best regards,
 * Danny
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[HTTP headers to improve web site security] Little bug in base-uri](https://wordpress.org/support/topic/little-bug-in-base-uri/)
 *  Thread Starter [dny24](https://wordpress.org/support/users/dny24/)
 * (@dny24)
 * [6 years, 2 months ago](https://wordpress.org/support/topic/little-bug-in-base-uri/#post-12936617)
 * Goodmorning Carl,
 * Thanks for your reply.
 * It doesn’t matter with value I give for base-uri,
    like ‘self’, ‘none’, ‘unsafe-
   hashes’ etc. The outcome of what HTTP Security Options write is the same: base-
   uri ; So nothing is written.
 * Normally; I would see something like:
    <IfModule mod_headers.c> Header set Content-
   Security-Policy “base-uri ‘self'”; </IfModule>
 * So it looks like a bug.
    But maybe I miss something…
 * Beste regards,
 * Danny

Viewing 2 replies - 1 through 2 (of 2 total)