Title: w3 total cache – security headers setup
Last modified: March 31, 2017

---

# w3 total cache – security headers setup

 *  [nerimizi](https://wordpress.org/support/users/nerimizi/)
 * (@nerimizi)
 * [9 years, 2 months ago](https://wordpress.org/support/topic/w3-total-cache-security-headers-setup/)
 * I’m searching in W3TC where I can put the security headers like X-XSS-Protection
   etc.
    In W3TC I’m able to setup the HSTS security header (Strict-Transport-Security)
   only with the max-age parameter (without includeSubDomains; preload)
 * A workaround is to writing the security headers in the functions.php
 * I experienced that W3TC discard all them, except the HSTS, after the first chaching
   🙁
 * Does anyone know a solution ?
 * Thanks a lot !
    nerimizi

Viewing 1 replies (of 1 total)

 *  [Fist Full of Crisco](https://wordpress.org/support/users/fistfullofcrisco/)
 * (@fistfullofcrisco)
 * [9 years, 2 months ago](https://wordpress.org/support/topic/w3-total-cache-security-headers-setup/#post-8980537)
 * I know the [community build of W3 Total Cache](https://github.com/szepeviktor/w3-total-cache-fixed/pull/344)
   has a very full featured security headers section included. It works incredibly
   well. And yes it also includes the ability to set HSTS directive: _**includeSubDomains;
   preload**_
 * I tend to use that build since it has a ton of bug fixes and new features that
   typically make there way into official releases of w3tc since the author also
   depends on it.
 * Just thought u should know since many here are already familiar with it.

Viewing 1 replies (of 1 total)

The topic ‘w3 total cache – security headers setup’ is closed to new replies.

 * ![](https://ps.w.org/w3-total-cache/assets/icon-256x256.png?rev=1041806)
 * [W3 Total Cache](https://wordpress.org/plugins/w3-total-cache/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/w3-total-cache/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/w3-total-cache/)
 * [Active Topics](https://wordpress.org/support/plugin/w3-total-cache/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/w3-total-cache/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/w3-total-cache/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Fist Full of Crisco](https://wordpress.org/support/users/fistfullofcrisco/)
 * Last activity: [9 years, 2 months ago](https://wordpress.org/support/topic/w3-total-cache-security-headers-setup/#post-8980537)
 * Status: not resolved