rspec/rules/S5750/recommended.adoc

4 lines
428 B
Plaintext
Raw Normal View History

2020-06-30 12:50:28 +02:00
== Recommended Secure Coding Practices
2021-01-27 13:42:22 +01:00
* Implement https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control[Cache-Control] HTTP header with a cacheability directive set to ``++private++`` in order to instruct shared caches (CDNs, proxies) to avoid caching. If the risk is too important, it is recommended to not cache anything at the web browser level too, with a cacheability directive set to ``++no-store++``.