Came across an application that uses below header to prevent caching.
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate Expires: 0 Pragma: no-cache
As per standards, with this HTTP headers data should not be cached.
When I checked in Firefox with
about:cache in address bar, I found data cached in browser memory. However it was not cached in disk.
So can this be treated as security issue? If yes, what is the mitigation for preventing data to be cached in browser memory? Can this be mitigated using