[
https://issues.apache.org/jira/browse/AIRFLOW-4178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
t oo updated AIRFLOW-4178:
--------------------------
Component/s: ui
security
> [security] cache-control header is not present
> ----------------------------------------------
>
> Key: AIRFLOW-4178
> URL: https://issues.apache.org/jira/browse/AIRFLOW-4178
> Project: Apache Airflow
> Issue Type: Bug
> Components: security, ui
> Reporter: t oo
> Priority: Minor
>
> The cache-control header is not present to specify that the response should
> not be cached.
> If UIs may contain other sensitive information, set the cache to prevent
> inadvertent page caching:
> - Cache-control header (HTTP 1.1) set to "no-cache, no-store"
> - Pragma header (HTTP 1.0) set to "no-cache"
> - Expires header served pre-expired (i.e. backdated one year)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
