http: add cache-control headers to prevent caching by other proxies elsewhere

2025-05-13 23:48:21 +02:00
parent 163fce6cfc
commit 6032ac0b78
7 changed files with 14 additions and 1 deletions
--- a/lib/challenge/preload-link/preload-link.go
+++ b/lib/challenge/preload-link/preload-link.go
@@ -101,6 +101,7 @@ func FillRegistration(state challenge.StateInterface, reg *challenge.Registratio

 	mux.HandleFunc("GET "+reg.Path+challenge.VerifyChallengeUrlSuffix, func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Content-Type", "text/css; charset=utf-8")
+		w.Header().Set("Cache-Control", "no-cache, no-store, must-revalidate")
 		w.Header().Set("Content-Length", "0")

 		data := challenge.RequestDataFromContext(r.Context())