This is the technical support forum for WPML - the multilingual WordPress plugin.
Everyone can read, but only WPML clients can post here. WPML team is replying on the forum 6 days per week, 22 hours per day.
Tagged: Bug
This topic contains 21 replies, has 2 voices.
Last updated by Kor 1 year, 10 months ago.
Assisted by: Kor.
Author | Posts |
---|---|
August 14, 2023 at 8:28 pm #14199805 | |
o-i-wpml |
Hi Kor, We couldn't find the header: add_header Access-Control-Allow-Origin "*"; in the Nginx config file (spec-settings.conf). Could you please confirm that those changes were successfully done on our side to proceed with the research? |
August 15, 2023 at 4:00 pm #14204259 | |
Kor WPML Supporter since 08/2022
Languages: English (English ) Timezone: Asia/Singapore (GMT+08:00) |
Thanks for your reply. Sorry, since we have no access to your nginx server configuration file, you'll have to make the changes on your own. Please refer to the answer here https://stackoverflow.com/questions/20881532/no-access-control-allow-origin-header-is-present-on-the-requested-resource . Also, try to reach out to your hosting provider and ask them to check on the error below. They might be able to help you further with this. NetworkError: Failed to execute 'send' on 'XMLHttpRequest': Failed to load '<em><u>hidden link</u></em>'. |
August 15, 2023 at 9:24 pm #14205363 | |
o-i-wpml |
Hello Kor, Thank you for getting back to us. I just wanted to clarify that you do have access to the nginx configuration files through the FTP server credentials that were provided earlier. These files are located within the path /site/nginx/ and include spec-settings.conf and default.conf. These configurations are utilized within the hosting container. Additionally, I noticed that the Stackoverflow thread you mentioned seems to pertain to a Node.js server rather than an nginx server with a PHP backend. If you're looking for guidance on adjusting headers in the Nginx configuration file (spec-settings.conf) for any specific setup, I recommend searching for the relevant headers within that file to ensure proper configuration. Should you have any questions or require further assistance, please feel free to reach out. Best regards. |
August 16, 2023 at 6:49 am #14206189 | |
Kor WPML Supporter since 08/2022
Languages: English (English ) Timezone: Asia/Singapore (GMT+08:00) |
Thanks for your reply. I've forwarded your feedback to our 2nd Tier Support and I will come back to you once I hear from them. |
August 16, 2023 at 8:24 am #14207111 | |
Kor WPML Supporter since 08/2022
Languages: English (English ) Timezone: Asia/Singapore (GMT+08:00) |
Thanks for your patience. I have another feedback and could you perform the following changes? You need to rehash (restart) your Nginx server after making changes. add_header Content-Security-Policy "object-src 'none'; frame-ancestors 'self';"; add_header Content-Security-Policy-Report-Only "img-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline';"; add_header X-Xss-Protection "1; mode=block" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload'; add_header Referrer-Policy "strict-origin"; add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)"; Could you perform a backup and try the steps mentioned by our 2nd Tier Support? Let me know how it goes. |
August 16, 2023 at 3:15 pm #14239107 | |
o-i-wpml |
Hello Kor, Thank you for your guidance and support. I followed the steps you provided, including commenting out the specified security headers in the Nginx configuration file. After making these changes, I rehashed (restarted) the Nginx server as suggested. I'm pleased to report that the issue has been successfully resolved. The desired changes have taken effect, and everything seems to be functioning as expected. I truly appreciate your assistance in troubleshooting this matter. If you need any further information or have additional recommendations, please don't hesitate to let me know. Your expertise has been invaluable. Best regards, |
August 16, 2023 at 3:41 pm #14239393 | |
Kor WPML Supporter since 08/2022
Languages: English (English ) Timezone: Asia/Singapore (GMT+08:00) |
Thanks for your reply. Glad to know that everything is working fine. I will share your feedback with our 2nd Tier Support and kindly mark this ticket as resolved. |