'Leave as is', 'on' => 'Enable', 'off' => 'Disable' ); ?>

' . __( 'enabled', 'w3-total-cache' ) : 'disabled">' . __( 'disabled', 'w3-total-cache' ) ) . '' ); ?>

' ); ?>

'browsercache.rewrite', 'disabled' => Util_Ui::sealing_disabled( 'browsercache.' ), 'control' => 'checkbox', 'checkbox_label' => __( 'Rewrite URL structure of objects', 'w3-total-cache' ), 'description' => __( 'Generate unique URI for each file protected from caching by browser.', 'w3-total-cache' ), 'style' => '2' ) ); ?>









URIs. Supports regular expressions.', 'w3-total-cache' ); ?>

checkbox( 'browsercache.no404wp', !Util_Rule::can_check_rules() ) ?>

URIs to 404 error exception list below to avoid that.', 'w3-total-cache' ); ?>

URIs.', 'w3-total-cache' ); ?>
CSS & JS', 'w3-total-cache' ), '', 'css_js' ); ?>

checkbox( 'browsercache.cssjs.last_modified' ) ?>
checkbox( 'browsercache.cssjs.expires' ) ?>
name="browsercache__cssjs__lifetime" value="_config->get_integer( 'browsercache.cssjs.lifetime' ) ); ?>" size="8" />
checkbox( 'browsercache.cssjs.cache.control' ) ?>
checkbox( 'browsercache.cssjs.etag' ) ?>
checkbox( 'browsercache.cssjs.w3tc' ) ?>
checkbox( 'browsercache.cssjs.compression' ) ?>
checkbox( 'browsercache.cssjs.replace' ) ?>
checkbox( 'browsercache.cssjs.querystring' ) ?>
checkbox( 'browsercache.cssjs.nocookies' ) ?>
HTML & XML', 'w3-total-cache' ), '', 'html_xml' ); ?>

checkbox( 'browsercache.html.last_modified' ) ?>
checkbox( 'browsercache.html.expires' ) ?>
value="_config->get_integer( 'browsercache.html.lifetime' ) ); ?>" size="8" />
checkbox( 'browsercache.html.cache.control' ) ?>
checkbox( 'browsercache.html.etag' ) ?>
checkbox( 'browsercache.html.w3tc' ) ?>
checkbox( 'browsercache.html.compression' ) ?>
checkbox( 'browsercache.other.last_modified' ) ?>
checkbox( 'browsercache.other.expires' ) ?>
name="browsercache__other__lifetime" value="_config->get_integer( 'browsercache.other.lifetime' ) ); ?>" size="8" />
checkbox( 'browsercache.other.cache.control' ) ?>
checkbox( 'browsercache.other.etag' ) ?>
checkbox( 'browsercache.other.w3tc' ) ?>
checkbox( 'browsercache.other.compression' ) ?>
checkbox( 'browsercache.other.replace' ) ?>
checkbox( 'browsercache.other.querystring' ) ?>
checkbox( 'browsercache.other.nocookies' ) ?>

HTTP security headers provide another layer of protection for your website by helping to mitigate attacks and security vulnerabilities.', 'w3-total-cache' ); ?>

'browsercache.security.session.use_only_cookies', 'control' => 'selectbox', 'selectbox_values' => $security_session_values, 'description' => __( 'This setting prevents attacks that are caused by passing session IDs in URLs.', 'w3-total-cache' ) ) ); ?> 'browsercache.security.session.cookie_httponly', 'control' => 'selectbox', 'selectbox_values' => $security_session_values, 'description' => __( 'This tells the user\'s browser not to make the session cookie accessible to client side scripting such as JavaScript. This makes it harder for an attacker to hijack the session ID and masquerade as the effected user.', 'w3-total-cache' ) ) ); ?> 'browsercache.security.session.cookie_secure', 'control' => 'selectbox', 'selectbox_values' => $security_session_values, 'description' => __( 'This will prevent the user\'s session ID from being transmitted in plain text, making it much harder to hijack the user\'s session.', 'w3-total-cache' ) ) ); ?>
checkbox( 'browsercache.hsts' ) ?>
HTTP Strict-Transport-Security (HSTS) enforces secure (HTTP over SSL/TLS) connections to the server. This can help mitigate adverse effects caused by bugs and session leaks through cookies and links. It also helps defend against man-in-the-middle attacks. If there are SSL negotiation warnings then users will not be permitted to ignore them.', 'w3-total-cache' ); ?>
checkbox( 'browsercache.security.xfo' ) ?>
value="_config->get_string( 'browsercache.security.xfo.allow' ) ); ?>" size="50" placeholder="Enter URL" />
checkbox( 'browsercache.security.xss' ) ?>
checkbox( 'browsercache.security.xcto' ) ?>
checkbox( 'browsercache.security.pkp' ) ?>
HTTP Public Key Pinning (HPKP) is a security feature for HTTPS websites that can prevent fraudulently issued certificates from being used to impersonate existing secure websites.' ); ?>
value="_config->get_string( 'browsercache.security.pkp.pin' ) ); ?>" size="50" placeholder="Enter the Base64-Encode of the SHA256 Hash" />
required and represents a SPKI fingerprint. This pin is any public key within your current certificate chain.' ); ?>
value="_config->get_string( 'browsercache.security.pkp.pin.backup' ) ); ?>" size="50" placeholder="Enter the Base64-Encode of the SHA256 Hash" />
also required and represents your backup SPKI fingerprint. This pin is any public key not in your current certificate chain and serves as a backup in case your certificate expires or has to be revoked.' ); ?>
value="_config->get_string( 'browsercache.security.pkp.report.url' ) ); ?>" size="50" placeholder="Enter URL" />
checkbox( 'browsercache.security.referrer.policy' ) ?>
checkbox( 'browsercache.security.csp' ) ?>
CSP) header reduces the risk of XSS attacks by allowing you to define where resources can be retrieved from, preventing browsers from loading data from any other locations. This makes it harder for an attacker to inject malicious code into your site.' ); ?>

Quick Reference Chart

value="_config->get_string( 'browsercache.security.csp.base' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.connect' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.font' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.frame' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.img' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.media' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.object' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.script' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.style' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.form' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />
value="_config->get_string( 'browsercache.security.csp.frame' ) ); ?>" size="50" placeholder="Example: 'none'" />
value="_config->get_string( 'browsercache.security.csp.plugin' ) ); ?>" size="50" placeholder="Example: application/x-shockwave-flash" />
value="_config->get_string( 'browsercache.security.csp.sandbox' ) ); ?>" size="50" placeholder="Example: allow-popups" />
value="_config->get_string( 'browsercache.security.csp.default' ) ); ?>" size="50" placeholder="Example: 'self' 'unsafe-inline' *.domain.com" />