iframe works for one C-Panel folder but not another

Thanks Jacob, I didn’t realize that iframe could only reach an address that included a domain, not just a file path. I solved the problem by creating a subdirectory, games.zafflower.com, and installing a new WordPress site in that subdomain. Now this iframe code will correctly display my Unity3D game. Thanks! Zaffer <iframe src=”https://games.zafflower.com/SummersDay/index.html” width=”1200″ height=”900″ … Read more

How do I modify each instance of setcookie?

I installed the SameSite plug-in which mimics the default PHP setcookie behavior and adds the additional parameter (samesite) to the cookie. I set the plug-in configuration in wp-config.php with: define( ‘WP_SAMESITE_COOKIE’, ‘None’ ); By setting the configuration of samesite=None, browsers will not enforce SameSite rules that are used to prevent CSRF. From the Mozilla blog: … Read more

How To Add CSP frame ancestors in WordPress Website? [closed]

SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X-]{4,13}$ HAVE_Accept-Encoding The regex ^(Accept-EncodXng|X-cept-Encoding|X{15}|{15}|-{15})$ is invalid, hence the error you are getting. Specifically, the error is here: ^(Accept-EncodXng|X-cept-Encoding|X{15}|{15}|-{15})$ —————————————^ {15} is a quantifier, but the preceding token | is not quantifiable, since this is itself a special meta character. There is something missing. But it’s not clear what this should be just … Read more

IFrame Shortcode plugin – issue

If you look in the browser’s development tools you’ll see this error: Refused to display ‘https://www.quora.com/‘ in a frame because it set ‘X-Frame-Options’ to ‘SAMEORIGIN’. This means that Quora does not allow itself to be used in iframes. If you’re just testing, then try another URL. If you actually want to embed Quora, then I’m … Read more

Prevent other sites from showing my site via iframe

WordPress has a built-in function to send the X-Frame-Options header: send_frame_options_header(). It is used by default on the login and admin pages. If you want to enable it always, just add it for front end views: add_action( ‘template_redirect’, ‘send_frame_options_header’ ); But … it doesn’t send Content-Security-Policy headers. If you want to have a more complete … Read more