wordpress-develop/tests/e2e/specs
John Blackbourn 8d702842ce Administration: Add the no-store and private directives to the Cache-Control header when preventing caching for logged in users.
The intention behind this change is to prevent sensitive data in responses for logged in users being cached and available to others, for example via the browser history after the user logs out.

The `no-store` directive instructs caches in the browser or within proxies not to store the response in the cache. This is subtly different from the `no-cache` directive which means the response can be cached but must be revalidated before re-use. WordPress does not use ETag headers by default therefore this does not achieve the same result.

The `private` directive complements the `no-store` directive by specifying that the response contains private information that should not be stored in a public cache. Som
e proxy caches may ignore the `no-store` directive but respect the `private` directive, thus it is included.

The existing `Cache-Control` header for users who are not logged in remains unchanged, and the existing cache prevention directives remain in place for backwards compatib
ility.

Props soulseekah, luehrsen, Dharm1025, markdoliner, rutviksavsani, ayeshrajans, paulkevan, clorith, andy786, johnbillion

Fixes #21938, Fixes #57627


git-svn-id: https://develop.svn.wordpress.org/trunk@55968 602fd350-edb4-49c9-b593-d223f7449a82
2023-06-21 18:25:40 +00:00
..
profile Application Passwords: Add end-to-end (e2e) tests. 2021-11-01 21:40:19 +00:00
cache-control-headers-directives.test.js Administration: Add the no-store and private directives to the Cache-Control header when preventing caching for logged in users. 2023-06-21 18:25:40 +00:00
dashboard.test.js Build/Test Tools: Make adjustments to how Quick Draft tests confirm expected behavior. 2021-11-10 01:49:01 +00:00
edit-posts.test.js Update the WP packages with fixes prior to WP 6.2 beta 3 2023-02-21 13:06:33 +00:00
empty-trash-restore-trashed-posts.test.js Build/Test Tools: Add trash and restore of a single post e2e tests. 2022-03-10 16:26:56 +00:00
gutenberg-plugin.test.js Build/Test Tools: Stylistic changes to Gutenberg e2e test. 2022-11-30 14:05:58 +00:00
hello.test.js Build/Test Tools: Fix the hello e2e test assertion. 2019-06-28 11:33:13 +00:00