--- id: 587d8249367417b2b2512c3e title: Disable Client-Side Caching with helmet.noCache() challengeType: 2 forumTopicId: 301576 dashedName: disable-client-side-caching-with-helmet-nocache --- # --description-- As a reminder, this project is being built upon the following starter project on [Replit](https://replit.com/github/freeCodeCamp/boilerplate-infosec), or cloned from [GitHub](https://github.com/freeCodeCamp/boilerplate-infosec/). If you are releasing an update for your website, and you want the users to always download the newer version, you can (try to) disable caching on client’s browser. It can be useful in development too. Caching has performance benefits, which you will lose, so only use this option when there is a real need. # --instructions-- Use the `helmet.noCache()` method on your server. # --hints-- helmet.noCache() middleware should be mounted correctly ```js (getUserInput) => $.get(getUserInput('url') + '/_api/app-info').then( (data) => { assert.include(data.appStack, 'nocache'); assert.equal( data.headers['cache-control'], 'no-store, no-cache, must-revalidate, proxy-revalidate' ); }, (xhr) => { throw new Error(xhr.responseText); } ); ``` # --solutions-- ```js /** Backend challenges don't need solutions, because they would need to be tested against a full working project. Please check our contributing guidelines to learn more. */ ```