CORS policy

[Oxy]

Hi and welcome to the forum

mod_headers

mod_headers is supported as far as I know, but CORS is not allowed on our hosting. We provide hosting for websites, not for data servers for external applications or as a file storage server. Even if you could set the Access-Control headers, the bot protection system would still prevent you from loading assets into external websites.

How can I add necessary security headers and resolve certificate issues on my website without coding

The TL;DR is: security scanners are blocked on our hosting. So even if you have setup the security headers correctly, those scanners won’t be able to see them. mod_headers is enabled by default. The issue here is not that your website is not returning the right headers, it’s that the header scanner is unable to access your website in the first place. Why not? Such as?