The application should return caching directives instructing browsers not to store local copies of any sensitive data.

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Won't Do
    • None
    • Component/s: None
    • Environment:

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      We want to control the server's caching directives from within individual scripts. We have identified following locations, where we can provide HTTP headers 'Cache-control: no-store' and 'Pragma: no-cache'. Please provide these response headers to the following identified locations and to all other pages where the sensitive contents must not be cached on the client.

      /jira/includes/blank.html
      /jira/plugins/servlet/gadgets/dashboard-diagnostics
      /jira/plugins/servlet/gadgets/ifr
      /jira/plugins/servlet/gliffyapi/clientresource
      /jira/rest/plugins/1.0/notifications/kbiswas
      /jira/s/en_US-jqmja3/729/168/_/favicon.ico

              Assignee:
              Unassigned
              Reporter:
              Reetesh Kumar
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: