search

oshp / oshp-tracking

Repository used to organize freely the work on the OSHP projects.
https://owasp.org/www-project-secure-headers/
GNU General Public License v3.0
3 stars 1 forks source link

Deprecated Security Header - Pragma #28

Closed baggers27 closed 6 months ago

baggers27 commented 6 months ago

BurpSuite recommends adding Cache-Control and Pragma as headers to control caching. Reviewing the Mozilla docs actually shows Pragma as a deprecated header but it's not mentioned on the OWASP Response Headers page even though Cache-Control does appear.

Given that Cache-Control is listed on the OWASP documentation, is it worth also adding Pragma as a deprecated security header so it's clear?

righettod commented 6 months ago

Hi,

Yes, you have 100% right, thanks a lot for raising the point.

It is added to our TODO list now.

Thanks again for raising the problem to us 👍

righettod commented 6 months ago

✅ Done via https://github.com/OWASP/www-project-secure-headers/pull/175