Flarum - WordPress Journey

[Sala]

@phenomlab I knew you would love this, security part. 🥳 I’ve forwarded to you a test user.

[phenomlab]

@Sala It the BBCodes show on a new topic as below

On response to a question, the same DIV is there but not populated

This is almost certainly a CORS issue, but I’ll need to see the headers you’ve applied to comment further, or make suggestions.

[Sala]

@phenomlab this one is going to be hard, I put it on pause

[phenomlab]

@Sala not sure what you mean? I need the headers you specified in your .htaccess file (I’m assuming Apache here).

[Sala]

@phenomlab I have forwarded to you the headers found in htaccess

[phenomlab]

@Sala thanks. I’ve checked the headers and again and I can’t see anything in the specific code I provided that would cause the bbcode to not display.

Does it work if you remove all the headers? If this is the case, my recommendation would be to enable them one by one and find out which one actually causes the issue. Once we know which one it is, we can then modify it to allow the display of bbcode.

It just seems odd to me that everything works fine on a new post, but not on reply. This would tell me they it’s not the headers, but I could be wrong. You may want to try disabling wp-rocket to see if that resolves the issue rather than removing the headers.

[Sala]

@phenomlab yesterday I fix 2 bugs on just at the time you needed an answer for the headers, I immediately knew this one needed a test of one by one bcoz it could be the Defer for Js .

[phenomlab]

@Sala yes, deferring JS can have a negative effect on functionality. For speed reasons, you typically place JS in the footer rather than the header, but this then means it’s not executed in time and in the DOM when needed.

Another potentially damaging feature is minifying JS to reduce it’s size. Whilst wp-rocket offers several mechanisms to make the site load faster, you’d need to test each one of these settings to ensure it doesn’t negatively impact the site.

[Sala]

@phenomlab Hurray!
We have found the line that blocked the icons, it was this one:-

Header set Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()" 

Now it’s your part to come up with another config line

[Sala]

It’s solved
Demoted the above line and re- modified the

Header set Feature-Policy "geolocation 'self' https://sopriza.com/" 

To

Permissions-Policy: geolocation=(self "https://sopriza.com") 

A+

[phenomlab]

@Sala yes, that will resolve the status rating, but that header doesn’t have any impact against JS loading.

Very odd.

[Sala]

@phenomlab I’ll be happy if you can help me with the Js link which was causing that, i will be able to exclude it and stop any future problems

[phenomlab]

@Sala Sorry - which JS link ?

[Sala]

@phenomlab the one which enables the bbcode icons to populate

[phenomlab]

@Sala I will likely need admin access to your site for this.