Kikobeats / cacheable-response / 23061299812

99%

push

github

fix: set private Cache-Control for forced responses (#124)

* fix: set private Cache-Control for forced responses

When `forceExpiration` is true, the response was emitted with
`Cache-Control: public, must-revalidate, max-age=0`. The `public`
directive allows CDNs (e.g. Cloudflare with Cache Everything) to
store and serve stale copies even after expiration, preventing
force from actually bypassing the CDN cache.

Use `private, no-cache, no-store, max-age=0` instead so no shared
cache can store a forced response.

Made-with: Cursor

* chore: drop standard-markdown

55 of 57 branches covered (96.49%)

Branch coverage included in aggregate %.

4 of 4 new or added lines in 1 file covered. (100.0%)

201 of 201 relevant lines covered (100.0%)

26.22 hits per line