Recovering access to Administrator following misapplied HTTP Content Security Policy

Overview

This article provides a step-by-step guide on recovering access to the Camino Administrator website following incorrect configuration of its' HTTP Response Headers.

Before You Begin

The steps included in this guide require you to perform installation actions on your Camino installation. We therefore recommend the following actions:

  • Perform a complete backup of your Camino website and it's database.

  • Perform the recovery action outside of your website's peak operating periods. If you are able, disable public access via firewall or network access management. The installer will cause the entire Camino installation to go offline for a short period of time.

What you will need

To complete this action you will need:

  • Ability to directly manage or manipulate the Camino database. This may be accomplished either via a GUI tool like dbeaver or SqlYOG or via the command line.

  • The ability to log into the Camino Installer website.

Recovery Process

Step 1: Delete the configuration entry from the database

A single entry needs to be deleted from Camino's database configuration table. Delete the row for whom the value of the entry_key is caminocms.cms.admin.httpheaders

If you are using a SQL CLI interface, the command will be:

DELETE FROM camino_cms_configuration WHERE entry_key = 'caminocms.cms.admin.httpheaders';

Step 2: Reinstall the Core extension

  1. Log into Camino Installer (this uses a different authentication schema, see accessing Camino Installer)

  2. Hover your mouse cursor over the contextual menu (three horizontal lines to the right) for the CMS Core extension and select Reinstall

  3. Ensure Run Sql Scripts is unticked and then click on Reinstall

  4. Wait for installation to complete. This may take a few seconds. Once completed, you should see the message Installation Successful.

  5. The default admin Http Headers have now been applied. To check, click on the Administrator Site link within Installer

Additional Information

This is a similar process to Resetting the Http Header configuration for the frontend website.

     
By Post
Calzada Media
Monks Thacky
Burton Lane
PRINCES RISBOROUGH
Buckinghamshire
HP27 9JF
GBR

Email
info@calzadamedia.com
Copyright © 2026 Calzada Media Limited. All Rights Reserved

Powered by Camino CMS 2.9.5079.

Rendered in 129 milliseconds
at 22 Oct 2026 18:58 GMT/UTC +00:00