Skip to content
This repository has been archived by the owner on Jun 24, 2022. It is now read-only.

Add noStore cacheControl to the diagnosisKeysFile download. #858

Merged
merged 5 commits into from
Jul 24, 2020

Conversation

jeberhardt
Copy link
Contributor

For added level of security, prevent requests for the diagnosisKeysFile from being cached.

@jeberhardt jeberhardt requested a review from a team as a code owner July 23, 2020 16:49
@jeberhardt jeberhardt linked an issue Jul 23, 2020 that may be closed by this pull request
@timarney
Copy link
Member

@henrytao-me ☝️ please have look

Copy link
Contributor

@henrytao-me henrytao-me left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Except CI and space.

@@ -38,7 +39,9 @@ class CovidShieldModule(context: ReactApplicationContext) : ReactContextBaseJava
@ReactMethod
fun downloadDiagnosisKeysFile(url: String, promise: Promise) {
promise.launch(this) {
val request = Request.Builder().url(url).build()
val request = Request.Builder()
.cacheControl(CacheControl.Builder().noStore().build())
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👾 I think we have 8 spaces here instead of 4.

@timarney
Copy link
Member

Gave CI a nudge - working now.

Copy link
Contributor

@henrytao-me henrytao-me left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@timarney timarney merged commit 35a6b3e into master Jul 24, 2020
@timarney timarney deleted the feature/441-android-cache-control branch July 24, 2020 12:33
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

MOB-M-4: Android Application Caches HTTPS Requests/Responses
3 participants