recovery_test.go
2.39 KB
-
Security: Responses from backend should not be cached (#16848) · f778c1d9
Currently all API requests set Cache-control: no-cache to avoid browsers caching sensitive data. This fixes so that all responses returned from backend not are cached using http headers. The exception is the data proxy where we don't add these http headers in case datasource backend needs to control whether data can be cached or not. Fixes #16845
Marcus Efraimsson committed