Set cache-control to no-store by default for stronger security

(cherry picked from commit 2dab16172e)
This commit is contained in:
Ken Liao 2024-08-22 22:11:29 -07:00 committed by JB Onofré
parent 6d02fb7a88
commit 5443b3d217
1 changed files with 5 additions and 0 deletions

View File

@ -74,6 +74,11 @@
<property name="name" value="X-Content-Type-Options"/> <property name="name" value="X-Content-Type-Options"/>
<property name="value" value="nosniff"/> <property name="value" value="nosniff"/>
</bean> </bean>
<bean id="header" class="org.eclipse.jetty.rewrite.handler.HeaderPatternRule">
<property name="pattern" value="*"/>
<property name="name" value="Cache-Control"/>
<property name="value" value="no-store"/>
</bean>
</list> </list>
</property> </property>
</bean> </bean>