https://bz.apache.org/bugzilla/show_bug.cgi?id=69415
Bug ID: 69415
Summary: ExpiresFilter incorrectly caches responses that are
explicitly declared as not cacheable
Product: Tomcat 10
Version: 10.1.31
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ------
Currently ExpiresFilter appends "Expires" header for response even with header
"Cache-Control: no-store". Per rfc9111#section-3, response with "no-store" must
not be cached.
BTW, suggest introduce "ExpiresIncludedMethods",
"ExpiresIncludedResponseStatusCodes" initial parameters to improve
configurability.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]