fs 3053a77cde fix(security): prevent browser caching of dynamic pages ...

Add Cache-Control: no-store to all PHP-rendered pages so the browser
never serves a stale admin/auth page from its back-forward cache.
Static assets (CSS, JS, images) keep their 30-day expiry unchanged.

Uses fastcgi_hide_header to suppress PHP's default Cache-Control
before setting the definitive header via Nginx.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-13 19:37:13 +01:00

1.3 KiB

Raw Blame History

View Raw