Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-7961

Add option to disable caching for HTTP responses

    XMLWordPrintableJSON

Details

    Description

      Some users are requesting the Cache-Control: no-store HTTP response header to be enabled for security reasons [1]. As NiFi is a SPA, this could significantly impact performance and we suspect it has minimal security impact. Adding this response header would necessitate an admin-configurable setting to enable/disable the header with the default value false (continuing existing behavior).

      [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control

      Attachments

        Activity

          People

            Unassigned Unassigned
            alopresto Andy LoPresto
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: