0

I am trying to make our web application more secure. So, want to prevent browser from caching session id of the application.

Our index.html already has meta tags as follows:

<meta http-equiv="Pragma" content="no-cache, no-store">
<meta http-equiv="Expires" content="-1">

But, this is not just sufficient.

Tried to include some other meta tags like:

<meta http-equiv="CACHE-CONTROL" content="NO-CACHE" />
<meta http-equiv="Expires" content="0">

but not able to achieve it.

Can any one help me with some other possible solution.

Gangadhar I H
  • 1

1 Answers1

0

please try setting response on server side. In java you can write this 

response.setHeader("Pragma", "no-cache");
    response.setHeader("Cache-Control", "no-store");
    response.setHeader("Expires", "0");
    response.setDateHeader("Expires", -1);
    response.setBufferSize(0);

Also, please refer here(HTTP response caching)

Community
  • 1
  • 1
Shatayu Darbhe
  • 797
  • 1
  • 7
  • 13