Lack of HTTP caching headers on the wormhole server #7

Open
opened 2 years ago by jahway603 · 0 comments
Collaborator

Ported from issue #5 on GitHub

TOB-ZEC-024 from https://github.com/trailofbits/publications/blob/master/reviews/zecwallet.pdf

Add

Cache-control: no-store and no-cache, must-revalidate, max-age=0

to prevent various issues. Note that Hush uses nginx in front of our Wormhole so we will be adding the header at that layer.

Ported from [issue #5 on GitHub](https://github.com/MyHush/SilentDragonWormhole/issues/5) TOB-ZEC-024 from https://github.com/trailofbits/publications/blob/master/reviews/zecwallet.pdf Add ``` Cache-control: no-store and no-cache, must-revalidate, max-age=0 ``` to prevent various issues. Note that Hush uses nginx in front of our Wormhole so we will be adding the header at that layer.
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.