-
Type:
Suggestion
-
Resolution: Won't Fix
-
Component/s: None
-
Environment:Operating System: Mac OS X 10.5.8
Java Version: 1.6.0_13
Java Vendor: Apple Inc.
JVM Version: 1.0
JVM Vendor: Sun Microsystems Inc.
JVM Impl Version: 11.3-b02-83
Java Runtime: Java(TM) SE Runtime Environment
Java VM: Java HotSpot(TM) 64-Bit Server VM
OS Architecture: x86_64
Database Type: MySQL
Database Driver: com.mysql.jdbc.Driver
Database Version: 76Operating System: Mac OS X 10.5.8 Java Version: 1.6.0_13 Java Vendor: Apple Inc. JVM Version: 1.0 JVM Vendor: Sun Microsystems Inc. JVM Impl Version: 11.3-b02-83 Java Runtime: Java(TM) SE Runtime Environment Java VM: Java HotSpot(TM) 64-Bit Server VM OS Architecture: x86_64 Database Type: MySQL Database Driver: com.mysql.jdbc.Driver Database Version: 76
NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.
We have to provide the following HTTP headers in all responses containing sensitive content:
Cache-control: no-store
Pragma: no-cache
We have identified some files at the following path, where we need to provide above headers. We are not able to identify the jsp pages or servlet, so that we can provide these headers. Can you please suggest us the exact locations of the pages? If they are servlets, these headers should be provided there.
/jira/plugins/servlet/gadgets/dashboard-diagnostics
/jira/plugins/servlet/gadgets/ifr
/jira/plugins/servlet/gliffyapi/clientresource
/jira/rest/plugins/1.0/notifications/kbiswas
/jira/s/en_US-jqmja3/729/168/_/favicon.ico
- duplicates
-
JRACLOUD-29625 The application should return caching directives instructing browsers not to store local copies of any sensitive data.
- Closed
- is related to
-
JRASERVER-29598 Provide HTTP headers for the content that absolutely must not be cached on the client
- Closed