From 501ec1f9e0edf675359767a7ffb4105a28d4231f Mon Sep 17 00:00:00 2001
From: Jason White <jason.white@owasp.org>
Date: Tue, 28 Jun 2016 16:22:50 +0200
Subject: [PATCH] Turning off caching in spring boot for dev purposes

---
 .../src/main/java/org/owasp/webgoat/WebSecurityConfig.java       | 1 +
 1 file changed, 1 insertion(+)

diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java b/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java
index bd1e5a5f8..6d6e9db31 100644
--- a/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java
+++ b/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java
@@ -64,6 +64,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
         security.and()
                 .logout()
                 .permitAll();
+        http.headers().cacheControl().disable();
 
     }