SEC-2230: Added Cache Control support

docs/manual/src/docbook/appendix-namespace.xml

@@ -264,6 +264,9 @@
                 It enables easy configuration for several headers and also allows for setting custom headers through
                 the <link xlink:href="#nsa-header">header</link> element.
                 <itemizedlist>
+                    <listitem><literal>Cache-Control</literal> and <literal>Pragma</literal> - Can be set using the
+                        <link xlink:href="#nsa-cache-control">cache-control</link> element. This ensures that the
+                        browser does not cache your secured pages.</listitem>
                     <listitem><literal>X-Frame-Options</literal> - Can be set using the
                         <link xlink:href="#nsa-frame-options">frame-options</link> element. The
                         <link xlink:href="http://en.wikipedia.org/wiki/Clickjacking#X-Frame-Options">X-Frame-Options
@@ -288,6 +291,7 @@
             <section xml:id="nsa-headers-children">
                 <title>Child Elements of <literal>&lt;headers&gt;</literal></title>
                 <itemizedlist>
+                    <listitem><link xlink:href="#nsa-cache-control">cache-control</link></listitem>
                     <listitem><link xlink:href="#nsa-content-type-options">content-type-options</link></listitem>
                     <listitem><link xlink:href="#nsa-frame-options">frame-options</link></listitem>
                     <listitem><link xlink:href="#nsa-header">header</link></listitem>
@@ -295,6 +299,17 @@
                 </itemizedlist>
             </section>
         </section>
+        <section xml:id="nsa-cache-control">
+            <title><literal>&lt;cache-control&gt;</literal></title>
+            <para>Adds <literal>Cache-Control</literal> and <literal>Pragma</literal> headers to ensure that the
+                browser does not cache your secured pages.</para>
+            <section xml:id="nsa-cache-control-parents">
+                <title>Parent Elements of <literal>&lt;cache-control&gt;</literal></title>
+                <itemizedlist>
+                    <listitem><link xlink:href="#nsa-headers">headers</link></listitem>
+                </itemizedlist>
+            </section>
+        </section>
         <section xml:id="nsa-frame-options">
             <title><literal>&lt;frame-options&gt;</literal></title>
             <para>When enabled adds the <link xlink:href="http://tools.ietf.org/html/draft-ietf-websec-x-frame-options-01">X-Frame-Options header</link> to the response, this allows newer browsers to do some security

docs/manual/src/docbook/namespace-config.xml

@@ -617,6 +617,8 @@ List&lt;OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
                 <progamlisting language="xml">
                     <![CDATA[
                             <headers>
+                                <!-- Add Cache-Control and Pragma headers -->
+                                <cache-control/>
                                 <!-- Adds X-XSS-Protection with value of 1 -->
                                 <xss-protection/>
                                 <!-- Add X-Frame-Options with a value of DENY -->