HTTP Header "Cache-Control: no-cache, no-store, must-revalidate,private - present, incorrect value"

We have migrated and hosted Sonarqube 8.9 LTS on Windows Server 2019, used IIS manager to host and not it is running fine over https://, while checking DNS header using xymon tool it is giving red flag with below values for Cache-Control header.

Note: While running on Windows server 2016 there was no issues so far.

Cache-Control: no-cache, no-store, must-revalidate,private - present, incorrect value

But on IIS, we have mentioned the value as “private” only for Cache-Control header.

Not sure from where it is getting other values like “no-cache, no-store, must-revalidate”.

Please let us know, is there any header settings in SonarQube side? and how we can remediate it.

Hey there.

SonarQube is adding these values.

This looks fishy. Have you accidentally set private - present somewhere, instead of just private?

:warning: Make sure you upgrade to SonarQube v9.9 LTS soon, not only to benefit from our Best LTS Ever™, but because soon we will systematically ask users to upgrade when they ask questions about earlier versions of SonarQube, which are now considered unsupported. :smiley: