Repository navigation
[JENKINS-43852] SecurityRealm captcha should use no-store as well as no cache in cache-control #22048
Description
looking at the code I think that the no-store option should be used in addition to the no-cache.
as navigating back or resubmitting the data will likely lead to an out of date captcha.
Originally reported by 
teilo, imported from: SecurityRealm captcha should use no-store as well as no cache in cache-control
- assignee:
wfollonier
- status: Resolved
- priority: Minor
- component(s): core
- label(s): 2.89.1-fixed, newbie-friendly, security
- resolution: Fixed
- resolved: 2017-11-13T07:26:14+00:00
- votes: 1
- watchers: 3
- imported: 2025-11-24
Raw content of original issue
looking at the code I think that the no-store option should be used in addition to the no-cache.
as navigating back or resubmitting the data will likely lead to an out of date captcha.
Activity
jenkins-infra-bot commentedon Apr 26, 2017
Remote link associated with this issue:
jenkins-infra-bot commentedon Nov 10, 2017
Raw content of original comment:
JENKINS-42852add caching options for captchaCode changed in jenkins
User: Wadeck Follonier
Path:
core/src/main/java/hudson/security/SecurityRealm.java
test/src/test/java/hudson/security/SecurityRealmTest.java
http://jenkins-ci.org/commit/jenkins/80d17f5a68739eafc27d5a3fd003b7eee4cfe8f3
Log:
JENKINS-43852add caching options for captcha (#3126)JENKINS-42852add caching options for captchajenkins-infra-bot commentedon Nov 13, 2017
Raw content of original comment:
The fix has been integrated towards 2.90
jenkins-infra-bot commentedon Nov 22, 2017
Raw content of original comment:
JENKINS-42852add caching options for captcha(cherry picked from commit 80d17f5a68739eafc27d5a3fd003b7eee4cfe8f3)
Code changed in jenkins
User: Wadeck Follonier
Path:
core/src/main/java/hudson/security/SecurityRealm.java
test/src/test/java/hudson/security/SecurityRealmTest.java
http://jenkins-ci.org/commit/jenkins/179ac8df0803375e4e600b7c44547419636d44fe
Log:
JENKINS-43852add caching options for captcha (#3126)JENKINS-42852add caching options for captcha(cherry picked from commit 80d17f5)