"Cache-Control: no-store" considered incomplete?

[Nicolas Christin]

Passive rule "10015 - Incomplete or No Cache-control and Pragma HTTP Header Set" gets triggered when a response contains a "Cache-Control: no-store" header. Is it really intended?

According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control:

no-store

The response may not be stored in any cache. Although other directives may be set, this alone is the only directive you need in preventing cached responses on modern browsers.

Thanks,

Nicolas

[TeeWeTee]

Interesting. On the English page I see the exact same thing:

However the page in German shows something different:

I think this probably changed recently? Anyway this should be clarified...

[nic.ch...@gmail.com]

I recently opened an issue for this: https://github.com/zaproxy/zaproxy/issues/6446