Header set Access-Control-Allow-Origin code added but nothing is happening

46 Views Asked by At

I am trying to solve the below option on my website

Strict-Transport-Security
Content-Security-Policy 
X-Frame-Options 
X-Content-Type-Options 
Referrer-Policy 
Permissions-Policy

I found the below code on Google and added the same in /etc/apache2/apache2.conf file. Also added the same code in .htaccess and restarted the server

<IfModule mod_headers.c>
 Header set Access-Control-Allow-Origin "*"
  Header set Access-Control-Allow-Credentials true
  Header set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT"
  Header set Access-Control-Max-Age "1000"
  Header set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"
</IfModule>

but it's not working

I have scanned my website in this URL: https://securityheaders.com/,

0

There are 0 best solutions below