From 5443b3d2174ac7934a1d43dd25021b07bc5d8956 Mon Sep 17 00:00:00 2001
From: Ken Liao <kenliao94@gmail.com>
Date: Thu, 22 Aug 2024 22:11:29 -0700
Subject: [PATCH] Set cache-control to no-store by default for stronger
 security

(cherry picked from commit 2dab16172e45d90065fe3aa2be53b59c286908cd)
---
 assembly/src/release/conf/jetty.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/assembly/src/release/conf/jetty.xml b/assembly/src/release/conf/jetty.xml
index e094b4f9d4..ea5cd95309 100644
--- a/assembly/src/release/conf/jetty.xml
+++ b/assembly/src/release/conf/jetty.xml
@@ -74,6 +74,11 @@
                   <property name="name" value="X-Content-Type-Options"/>
                   <property name="value" value="nosniff"/>
                 </bean>
+                <bean id="header" class="org.eclipse.jetty.rewrite.handler.HeaderPatternRule">
+                    <property name="pattern" value="*"/>
+                    <property name="name" value="Cache-Control"/>
+                    <property name="value" value="no-store"/>
+                </bean>
             </list>
         </property>
     </bean>