Incomplete or No Cache-control Header Set
The cache-control header has not been set properly or is missing, allowing the browser and proxies to cache content.
Summary
The cache-control header has not been set properly or is missing, allowing the browser and proxies to cache content.
Solution
Whenever possible ensure the cache-control HTTP header is set with no-cache, no-store, must-revalidate.
References
- https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#web-content-caching
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
Achieve SOC2 Compliance
We make your startup SOC2 compliant by implementing and managing the required security controls for you.
