Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-04 01:07:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-2331: Include Expires: 0 in xsd and appendix

Browse Source
This commit is contained in:
Rob Winch
2013-09-27 17:10:42 -05:00
parent 8fed90c26c
commit 8087cde628
4 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/manual/src/docbook/appendix-namespace.xml
+3 -3
View File
@@ -265,7 +265,7 @@
It enables easy configuration for several headers and also allows for setting custom headers through
the <link linkend="nsa-header">header</link> element.
<itemizedlist>
<listitem><literal>Cache-Control</literal> and <literal>Pragma</literal> - Can be set using the
<listitem><literal>Cache-Control</literal>, <literal>Pragma</literal>, and <literal>Expires</literal> - Can be set using the
<link linkend="nsa-cache-control">cache-control</link> element. This ensures that the
browser does not cache your secured pages.</listitem>
<listitem><literal>Strict-Transport-Security</literal> - Can be set using the
@@ -306,8 +306,8 @@
</section>
<section xml:id="nsa-cache-control">
<title><literal>&lt;cache-control&gt;</literal></title>
<para>Adds <literal>Cache-Control</literal> and <literal>Pragma</literal> headers to ensure that the
browser does not cache your secured pages.</para>
<para>Adds <literal>Cache-Control</literal>, <literal>Pragma</literal>, and <literal>Expires</literal>
headers to ensure that the browser does not cache your secured pages.</para>
<section xml:id="nsa-cache-control-parents">
<title>Parent Elements of <literal>&lt;cache-control&gt;</literal></title>
<itemizedlist>
docs/manual/src/docbook/namespace-config.xml
+1 -1
View File
@@ -642,7 +642,7 @@ List&lt;OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
<http ...>
...
<headers>
<!-- Add Cache-Control and Pragma headers -->
<!-- Add Cache-Control, Pragma, and Expires headers -->
<cache-control/>
<!-- Add X-Content-Type-Options with value of nosniff -->
<content-type-options/>