Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insufficient Cache Control in admin UI page which contain user-supplied information #22479

Closed
sug-ghosh opened this issue Jun 22, 2024 · 1 comment
Assignees

Comments

@sug-ghosh
Copy link

sug-ghosh commented Jun 22, 2024

Not setting the proper header values may cause browsers to store pages within their respective caches. On public, shared, or any other non-private computers, a malicious person may search through the browser cache to locate sensitive information cached during another user's session.

In Trino WebUI also, we have all the query details pages, we are storing the cache in browser which should be remediated.

@sug-ghosh sug-ghosh changed the title Insuffi Insufficient Cache Control in admin UI page which contain user-supplied information Jun 22, 2024
@sug-ghosh sug-ghosh self-assigned this Jun 24, 2024
@wendigo
Copy link
Contributor

wendigo commented Jun 26, 2024

Closed by #22502

@wendigo wendigo closed this as completed Jun 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants