@@ -0,0 +1,1111 @@
+package org.uberfire.ext.security.server;%0A%0Aimport java.io.IOException;%0Aimport javax.servlet.Filter;%0Aimport javax.servlet.FilterChain;%0Aimport javax.servlet.FilterConfig;%0Aimport javax.servlet.ServletException;%0Aimport javax.servlet.ServletRequest;%0Aimport javax.servlet.ServletResponse;%0Aimport javax.servlet.http.HttpServletResponse;%0A%0Apublic class CacheHeadersFilter implements Filter %7B%0A%0A    @Override%0A    public void init( final FilterConfig filterConfig ) throws ServletException %7B%0A    %7D%0A%0A    @Override%0A    public void destroy() %7B%0A    %7D%0A%0A    @Override%0A    public void doFilter( final ServletRequest request,%0A                          final ServletResponse response,%0A                          final FilterChain chain ) throws IOException, ServletException %7B%0A        ( (HttpServletResponse) response ).setHeader( %22Cache-Control%22, %22no-cache, no-store, must-revalidate%22 ); // HTTP 1.1.%0A        ( (HttpServletResponse) response ).setHeader( %22Pragma%22, %22no-cache%22 ); // HTTP 1.0.%0A        ( (HttpServletResponse) response ).setDateHeader( %22Expires%22, 0 ); // Proxies.%0A%0A        chain.doFilter( request, response );%0A    %7D%0A%0A%7D

enforce cache control on HTTP headers (html is not enought)