Skip to content

Resolves #308 #309

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Feb 12, 2021
Merged

Resolves #308 #309

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d42b3eb
update remediation advice for cache-control
aidanstansfield Nov 24, 2020
bc52dc0
update cache control advice notes in changelog
aidanstansfield Dec 18, 2020
db8d303
updated changelog
aidanstansfield Feb 10, 2021
3711ba4
Merge branch 'master' into update-cache-control-advice
adamrdavid Feb 11, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
- broken_authentication_and_session_management.weak_login_function.lan_only

### Changed
- server_security_misconfiguration.lack_of_security_headers.cache_control_for_a_non_sensitive_page updated remediation advice
- server_security_misconfiguration.lack_of_security_headers.cache_control_for_a_sensitive_page updated remediation advice

## [v1.9](https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.8...v1.9) - 2020-05-22
### Added
Expand Down
4 changes: 2 additions & 2 deletions mappings/remediation_advice/remediation_advice.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -412,7 +412,7 @@
},
{
"id": "cache_control_for_a_non_sensitive_page",
"remediation_advice": "As a best practice, consider using the `Cache-Control: no-cache` as it will help insure that the browser does not cache pages. Although the page may not currently contain sensitive data, sensitive data may be unintentionally placed there in the future.",
"remediation_advice": "As a best practice, consider using the `Cache-Control: no-store` as it will help insure that the browser does not cache pages. Although the page may not currently contain sensitive data, sensitive data may be unintentionally placed there in the future.",
"references": [
"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control"
]
Expand Down Expand Up @@ -483,7 +483,7 @@
},
{
"id": "cache_control_for_a_sensitive_page",
"remediation_advice": "Add the `Cache-Control` HTTP response header such as `Cache-Control: no-cache`, as it will help insure that the browser does not cache sensitive pages."
"remediation_advice": "Add the `Cache-Control` HTTP response header such as `Cache-Control: no-store`, as it will help insure that the browser does not cache sensitive pages."
}
]
},
Expand Down