t oo created AIRFLOW-4178:
-----------------------------
Summary: [security] cache-control header is not present
Key: AIRFLOW-4178
URL: https://issues.apache.org/jira/browse/AIRFLOW-4178
Project: Apache Airflow
Issue Type: Bug
Reporter: t oo
The cache-control header is not present to specify that the response should not
be cached.
If UIs may contain other sensitive information, set the cache to prevent
inadvertent page caching:
- Cache-control header (HTTP 1.1) set to "no-cache, no-store"
- Pragma header (HTTP 1.0) set to "no-cache"
- Expires header served pre-expired (i.e. backdated one year)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
