Recently my clients had taken vulnerability scans of PBIRS(on premise). The scan report indicates CWE: 525(Cache Management: Insecure Policy ( 11306 )) low issues. The scan software is Micro Focus. Recommed fix is: Set the Cache-Control directive to private and no-store.
PBIRS build version: 15.0.1113.165
File version: 1.18.8683.7488
SSL: Yes
I've tried to apply CustomHeaders from "https://learn.microsoft.com/en-us/sql/reporting-services/tools/server-properties-advanced-page-repor....
CustomHeader value is as below:
<CustomHeaders> <Header> <Name>X-XSS-Protection</Name> <Pattern></Pattern> <Value>1; mode=block</Value> </Header> <Header> <Name>Cache-Control</Name> <Pattern></Pattern> <Value>private</Value> </Header> </CustomHeaders>
However, the scan result was the same as before. I'd like to know how to fix this low issue.
