[AMQ-9545] Setting Cache-Control policy on web console.

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 6.2.0, 5.18.6, 6.1.4
• Component/s: Web Console
• Assignee: Ken Liao
• Reporter: Ken Liao
• Created: 07/Aug/24 18:54
• Updated: 12/Sep/24 16:33
• Resolved: 10/Sep/24 07:27

Description

Unspecified Cache-Control HTTP header is vulnerable. Set it to no-store to avoid caching sensitive data for stronger security. It should be the default unless users override it.

Reference: https://www.virtuesecurity.com/kb/cache-controls-explained/