diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java b/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java index bd1e5a5f8..6d6e9db31 100644 --- a/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java +++ b/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java @@ -64,6 +64,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter { security.and() .logout() .permitAll(); + http.headers().cacheControl().disable(); }