[
https://issues.apache.org/jira/browse/NIFI-7961?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7961:
--------------------------------
Priority: Trivial (was: Major)
> Add option to disable caching for HTTP responses
> ------------------------------------------------
>
> Key: NIFI-7961
> URL: https://issues.apache.org/jira/browse/NIFI-7961
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Core UI
> Affects Versions: 1.12.1
> Reporter: Andy LoPresto
> Priority: Trivial
> Labels: cache-control, http, jetty, security
>
> Some users are requesting the {{Cache-Control: no-store}} HTTP response
> header to be enabled for security reasons [1]. As NiFi is a SPA, this could
> significantly impact performance and we suspect it has minimal security
> impact. Adding this response header would necessitate an admin-configurable
> setting to enable/disable the header with the default value {{false}}
> (continuing existing behavior).
> [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
