I have a self-hosted Wordpress installation on a Linux system and there are a lot of modifications such as blacklisting and path rewrites and so on that is done within the .htaccess file that all work fine.
However, I have this block of rules:
RewriteEngine On ## HAVE TRIED WITH THIS LINE THERE AND WITHOUT, NO CHANGE ##
Header set X-XSS-Protection "1; mode=block"
Header always append X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
but it does not take effect and does not get applied. I have verified the syntax and to the best of ability and consistent with the documentation, it is correct. So anyone can provide me an explanation as to why it is not taking effect and what I might need to do to get it to work.
I would appreciate any assistance in better understanding what is going on and where the disconnect is. I would post the ENTIRE .htaccess but the fact is that its fairly long and I didn't want to clutter the post. Also, not that it should matter (at least I don't think so) but this block is at the very end of the file.
- WordPress version: 4.2.4
- Running on: Apache
- Powered by: PHP/5.5.26