Contact us for your penetration testing needs 1-866-PLYNT-24    |   Contact Us   Plynt UK Website  
Click to get Security Testing Quote
I notice that a lot of sensitive pages in my app are getting cached on the browser. How do I prevent that?

In order to improve performance, browsers often cache web pages. All the cached web pages are automatically stored in the Temporary Internet files on the local PC. An adversary is able to access these files by just clicking any link from the history of the browser or else clicking on the link in the temporary Internet files folder. Web pages can be prevented from getting cached by issuing the correct cache control headers in the server response. The cache control directives can be set from the code and these prevent caching of the web pages on the browser. The directives to be set are:

cache-control: no-cache

or

cache-control: no-store

A great resource to learn about caching is Mark Nottingham's paper on caching.


Request a proposal

Our quote contains the best price, the time estimate, and our methodology; and we'll mail you the quote in 24 hrs.


                                                
 
Movable Type Appliance - Powered by TurnKey Linux