Skip to content

[backport 19.2.X] skip transfer cache for uncacheable HTTP headers - #69094

Closed
SkyZeroZx wants to merge 1 commit into
angular:19.2.xfrom
SkyZeroZx:fix/trasnfercache-19
Closed

SkyZeroZx wants to merge 1 commit into
angular:19.2.xfrom
SkyZeroZx:fix/trasnfercache-19

Conversation

@SkyZeroZx

Copy link
Copy Markdown
Contributor

Backport of #69017

Only the uncacheable headers commit is backported, since in Angular 19, the Fetch API still does not support credentials or caching.

@angular-robot angular-robot Bot added the area: common Issues related to APIs in the @angular/common package label Jun 2, 2026
@ngbot ngbot Bot added this to the Backlog milestone Jun 2, 2026
Do not store HTTP transfer cache entries when either the request or response uses `Cache-Control: no-store`, `Cache-Control: private`, or `Cache-Control: no-cache`.

Because transfer cache serializes SSR HTTP responses into the rendered HTML, Angular now treats these directives conservatively to avoid exposing sensitive or explicitly uncacheable data through `TransferState`.
@SkyZeroZx
SkyZeroZx force-pushed the fix/trasnfercache-19 branch from 7f8e0ec to 07857b8 Compare June 2, 2026 18:10
@SkyZeroZx SkyZeroZx changed the title fix(common): skip transfer cache for uncacheable HTTP headers [backport 19.2.X] skip transfer cache for uncacheable HTTP headers Jun 2, 2026
@angular-robot angular-robot Bot added the area: common/http Issues related to HTTP and HTTP Client label Jun 2, 2026
@JeanMeche

JeanMeche commented Jun 2, 2026

Copy link
Copy Markdown
Member

We won't be backporting it to 19.2 as it will be outside of LTS when #69017 gets merged. We will need a PR targeting the v21 branch specificaly though.

@JeanMeche JeanMeche closed this Jun 2, 2026
@angular-automatic-lock-bot

Copy link
Copy Markdown

This pull request has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot Bot locked and limited conversation to collaborators Jul 3, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

area: common/http Issues related to HTTP and HTTP Client area: common Issues related to APIs in the @angular/common package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants