From 2dab16172e45d90065fe3aa2be53b59c286908cd Mon Sep 17 00:00:00 2001
From: Ken Liao <kenliao94@gmail.com>
Date: Thu, 22 Aug 2024 22:11:29 -0700
Subject: [PATCH] Set cache-control to no-store by default for stronger
 security

---
 assembly/src/release/conf/jetty.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/assembly/src/release/conf/jetty.xml b/assembly/src/release/conf/jetty.xml
index 874afeeaef..e475e80810 100644
--- a/assembly/src/release/conf/jetty.xml
+++ b/assembly/src/release/conf/jetty.xml
@@ -74,6 +74,11 @@
                   <property name="name" value="X-Content-Type-Options"/>
                   <property name="value" value="nosniff"/>
                 </bean>
+                <bean id="header" class="org.eclipse.jetty.rewrite.handler.HeaderPatternRule">
+                    <property name="pattern" value="*"/>
+                    <property name="name" value="Cache-Control"/>
+                    <property name="value" value="no-store"/>
+                </bean>
             </list>
         </property>
     </bean>