32 lines
786 B
Plaintext
32 lines
786 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
In Express.js application the code is sensitive if the https://www.npmjs.com/package/nocache[helmet nocache] middleware is not used:
|
|
|
|
----
|
|
const express = require('express');
|
|
let app = express(); // Sensitive
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
In Express.js application a standard way to implement cache-control HTTP header with no-store directive is with the https://www.npmjs.com/package/nocache[helmet nocache] middleware:
|
|
|
|
----
|
|
const express = require('express');
|
|
const nocache = require('nocache');
|
|
const helmet = require('helmet');
|
|
|
|
let app = express();
|
|
app.use(nocache()); // Compliant
|
|
// or
|
|
app.use(helmet.nocache()); // Compliant
|
|
----
|
|
|
|
include::../see.adoc[]
|