简体繁体 English

WordPress的内容安全政策

[英]Wordpress Content Security Policy

原文 2017-06-15 07:57:39 6 1 wordpress/ https

I am completely stumped. 我完全陷入了困境。 We designed a website a few months ago using paperio premium theme and also made use of slider revolution and visual bakery to set up the content. 几个月前，我们使用paperio高级主题设计了一个网站，并利用滑块革命和视觉烘焙来设置内容。 We used All in one seo for optimization. 我们将All合一的seo用于优化。 We used All in one security and wordfence to block hacks and spam. 我们使用了“安全一体式”和“围栏”功能来阻止黑客入侵和垃圾邮件。

The site ran beautifully for three months without any issues. 该网站顺利运行了三个月，没有任何问题。 Yesterday however a number of strange issues popped up. 但是昨天出现了许多奇怪的问题。 If you view the domains code in the chrome inspector you will notice a long list of errors - 如果您在Chrome浏览器中查看域代码，则会注意到一长串错误-

Examples: 例子：

Content Security Policy: The page's settings blocked the loading of a resource at https://fonts.googleapis.com/css?family=Anton%3A400 (“default-src https://www.wowflight.co.za ”). 内容安全政策：该页面的设置阻止了https://fonts.googleapis.com/css?family=Anton%3A400 （“ default-src https://www.wowflight.co.za ”）上资源的加载。

Can anyone please give me some direction in how to resolve these problems? 谁能给我一些解决这些问题的方向？ It's gotta be something simple, but i can not see where the problem is happening. 它一定很简单，但是我看不到问题出在哪里。

Thanks Greg 谢谢格雷格

1 个解决方案

In the content of the page you have: 在页面内容中，您具有：

< meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src https://*; child-src 'none';"> <meta http-equiv =“ Content-Security-Policy” content =“ default-src'self'; img-src https：// *; child-src'none';”>

It's probably added manually or from a security plugin. 它可能是手动添加的，也可能是通过安全插件添加的。