mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
566ad05f20
Do not store HTTP transfer cache entries when either the request or response uses `Cache-Control: no-store`, `Cache-Control: private`, or `Cache-Control: no-cache`. Also skip transfer cache when requests use the Fetch API `cache` option with `no-store` or `no-cache`. Because transfer cache serializes SSR HTTP responses into the rendered HTML, Angular now treats these directives conservatively to avoid exposing sensitive or explicitly uncacheable data through `TransferState`. (cherry picked from commit4d150156ca) (cherry picked from commit64ce11fcd4)