https://bz.apache.org/bugzilla/show_bug.cgi?id=69415

            Bug ID: 69415
           Summary: ExpiresFilter incorrectly caches responses that are
                    explicitly declared as not cacheable
           Product: Tomcat 10
           Version: 10.1.31
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: ch...@msn.com
  Target Milestone: ------

Currently ExpiresFilter appends "Expires" header for response even with header
"Cache-Control: no-store". Per rfc9111#section-3, response with "no-store" must
not be cached.

BTW, suggest introduce "ExpiresIncludedMethods",
"ExpiresIncludedResponseStatusCodes" initial parameters to improve
configurability.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to