Seems there is an issue with these changes. This is what the output of `https://www.example.com/.well-known/traffic-advice` looks like with WO 3.15.3 :
```
[\{
"user_agent": "prefetch-proxy",
"google_prefetch_proxy_eap": \{
"fraction": 1.0
\}
\}]
```
**Here is the expected output for a valid configuration**:
```
[{
"user_agent": "prefetch-proxy",
"google_prefetch_proxy_eap": {
"fraction": 1.0
}
}]
```
# X-XSS-Protection
Even though this feature can protect users of older web browsers that don't yet support CSP, in some cases, XSS protection can create XSS vulnerabilities in otherwise safe websites.
Reference: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protectionhttps://thexssrat.medium.com/x-xss-protection-headers-protection-or-vulnerability-bc7213951320
Chrome has removed their XSS Auditor
Firefox has not, and will not implement X-XSS-Protection
Edge has retired its XSS filter.
# X-Download-Options
Microsoft announced the retirement of Internet Explorer and it's rendered inoperable since June 15, 2022. So, we may safely remove this IE 8 specific HTTP Header too.
The map directive contains regexes (strings starting with a tilde) that
contain 'asterisk' characters. In a regex, the asterisk character is a
metacharacter, and in this context, it is meant as a wildcard character.
To achieve the desired result, we should place a dot in front of the
asterisk character.
The map directive contains regexes (strings starting with a tilde) that
contain 'dot' characters. In a regex, the dot character is a
metacharacter and should be escaped by putting a backslash before it.
Removed `/edd_action` as it's actually `/?edd_action` a query string. They are removed by default.
Removed `/checkout` as we already have /checkout/ (One of my plugins has the URL of /checkout-countdown../ and was never cached.)
Added `/account/` as it's a common page that shouldn't be cached.
