[jira] [Resolved] (NIFI-7961) Add option to disable caching for HTTP responses

["David Handermann (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-7961?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-7961.
------------------------------------
    Resolution: Abandoned

> Add option to disable caching for HTTP responses
> ------------------------------------------------
>
>                 Key: NIFI-7961
>                 URL: https://issues.apache.org/jira/browse/NIFI-7961
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Core Framework, Core UI
>    Affects Versions: 1.12.1
>            Reporter: Andy LoPresto
>            Priority: Trivial
>              Labels: cache-control, http, jetty, security
>
> Some users are requesting the {{Cache-Control: no-store}} HTTP response header to be enabled for security reasons [1]. As NiFi is a SPA, this could significantly impact performance and we suspect it has minimal security impact. Adding this response header would necessitate an admin-configurable setting to enable/disable the header with the default value {{false}} (continuing existing behavior). 
> [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control



--
This message was sent by Atlassian Jira
(v8.20.10#820010)