• Good morning,

    I am cleaning up my site for compliance/best practices and I have come across an issue with http headers. W3TC adds this “x-powered-by:W3 Total Cache/0.9.6” and while I have no problem with having a W3TC label, I really don’t want the header;

    HTTP headers do not provide any value to users, contributes to header bloat, and just gives more information to any potential attackers about the technology stack being used.

    What could be considered the best practice approach to remove “X-Powered-By: W3C total Cache…” http header from response”

    Is there away to disable this? Appreciate it. Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • hi
    There is no way unless they add an option in their settings in the upcoming updates, which I doubt.
    For mine, I simply use another plugin to cleanup the head, which works horizontally for all other plugins and the core as well: Speed Booster Pack. This will remove also the query strings and defer the JS.
    I know it will be another plugin in your long list of plugins but hey… that’ their purpose: help you avoid coding by hand ??

    Actually there is a way to remove it. There is a checkbox under Browser Cache.

    For me i dont have the problem with the X-Powered header.

    Thread Starter sdawales

    (@sdawales)

    @fistfullofcrisca, Sorry mate, I couldn’t find it. Any pointers? Cheers.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘x-powered-by:W3 Total Cache/0.9.6’ is closed to new replies.