Merge pull request #1287 from kenliao94/add_security_header_v2

[AMQ-9545] Set cache-control to no-store by default for stronger security
2024-09-10 09:26:04 +02:00 · 2024-09-10 09:26:04 +02:00 · 2fc07ac39a
parent cf8cbead37 2dab16172e
commit 2fc07ac39a
1 changed files with 5 additions and 0 deletions
--- a/assembly/src/release/conf/jetty.xml
+++ b/assembly/src/release/conf/jetty.xml
@ -74,6 +74,11 @@
                  <property name="name" value="X-Content-Type-Options"/>
                  <property name="value" value="nosniff"/>
                </bean>
+                <bean id="header" class="org.eclipse.jetty.rewrite.handler.HeaderPatternRule">
+                    <property name="pattern" value="*"/>
+                    <property name="name" value="Cache-Control"/>
+                    <property name="value" value="no-store"/>
+                </bean>
            </list>
        </property>
    </bean>