I wanted to know the best way to implement the following in ASP.NET. I have never used these directives so if you could kindly give me a sample code, It would be really helpful.
- HTTP/1.0 Pragma header
- HTTP/1.1 Cache - Control header
- Backdated Expires Header
As you mentioned on your question, they are simply HTTP Headers. Some of these headers, for example
Cache-Controlwere introduced with HTTP v1.1. Others were introduced since HTTP 1.0 (Pragma), etc.All you need to do is add them to your Response via
Response.AddHeader("Key","value");For example:
UPDATE Now that you provide more details...
I don't particularly see any security issues with not setting these headers on your response. What's the issue with no caching pages according to the auditing company? If anything, your website is more secure by not allowing browsers to cache your pages.
Update 2 One way to define your pragma header on the markup is to have this:
Right after the opening
<head>element of youraspxpage. Similarly for all other headers.