Set cache-control to no-store by default for stronger security

(cherry picked from commit 2dab16172e)
2024-08-22 22:11:29 -07:00 · 2024-08-22 22:11:29 -07:00 · 5443b3d217
parent 6d02fb7a88
commit 5443b3d217
1 changed files with 5 additions and 0 deletions
--- a/assembly/src/release/conf/jetty.xml
+++ b/assembly/src/release/conf/jetty.xml
@ -74,6 +74,11 @@
                  <property name="name" value="X-Content-Type-Options"/>
                  <property name="value" value="nosniff"/>
                </bean>
+                <bean id="header" class="org.eclipse.jetty.rewrite.handler.HeaderPatternRule">
+                    <property name="pattern" value="*"/>
+                    <property name="name" value="Cache-Control"/>
+                    <property name="value" value="no-store"/>
+                </bean>
            </list>
        </property>
    </bean>