tree 7dd288f52193628c07e2435e48a135e0c834372e
parent f2190274d44163e44d5a91bf8728278dce06dca2
author Jarek Potiuk <jarek@potiuk.com> 1715363643 +0200
committer GitHub <noreply@github.com> 1715363643 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJmPl87CRC1aQ7uu5UhlAAAbBEQAFjTkG+CDJ3Ey+tGPSuZbd3O
 ze/XtqtJRoBV8B6lrVVl/GmAmUjJuQtlNhOXeTC4K8lu5wU++BH/58zhgtFVT4fN
 4QXfAy2ST3TcsWwdpyMU+YApsEjXt4IY1WdR7zi34NzumxdjQZ3nltXkLF+Vg/ti
 Lrh6Rf0ENXuKTqrJBfUPurMFVGLp7xRd4fiTvwKLKgNOSfYnwAPmXZwq0q9AZcnB
 utAScD3iLUBkGrd+TLcd6Ic78O6exjBUsqJQptCfUX6AsxjEuBWiYYQ2TalnCTYC
 cTtU3Gp6rvhTkz25eHXvWS8PuNenTrvC58mGTgDWhslWwmjF2KfLpqaQwaqtBDXW
 FCw9Pe5mdBgwbdNaqBSFduxERrrnyNfZ46h2OGvzD/C6h2xvwYzbHMZ8ilhajgb5
 voPWo9SQNaJ7gcZFtvCqmIE5gIhvDtsmfSkXXXY7PFrMTuoZUt6Ah4F8Mzp4Z82J
 ptcjspyspcFnkD23q8NqbW1hYtYxTKr90NRfXZL0rWr129Fu89QUSjltqp7IDGU0
 vLrca/gC07FoKsn8kpz6gbYMC2y5DLTjIYkNej+XAP13MGMKg474kiklD3OfoJVl
 /TQGz9+Q0N11DFDke0VJ2GYPW1eAWWre+XFNT2r7mubYPEWgGaqBVQ2B+9FbA5gm
 8abvZTqObVYgpNhinCQm
 =x1pC
 -----END PGP SIGNATURE-----
 

Add Cache-Control "no-store" to all dynamically generated content (#39550)

This one prevents accidental storing of dynamic content containing
potentially sensitive data in cache. The way we implemented it, we
check if the response already contains "Cache-Control" - if it does
then it means that this is a static content with default cache
control set by SEND_FILE_MAX_AGE_DEFAULT setting (43200 by default).