From ab542416904417ddb9a53bf27e6f1c98645cdd74 Mon Sep 17 00:00:00 2001
From: Phil Lee <asmega@users.noreply.github.com>
Date: Thu, 25 May 2023 15:00:57 +0100
Subject: [PATCH] set no cache headers for sales

---
 .../bulk_upload_sales_resume_controller.rb           |  5 +++++
 .../bulk_upload_sales_resume_controller_spec.rb      | 12 ++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/app/controllers/bulk_upload_sales_resume_controller.rb b/app/controllers/bulk_upload_sales_resume_controller.rb
index bf4151094..9f937630d 100644
--- a/app/controllers/bulk_upload_sales_resume_controller.rb
+++ b/app/controllers/bulk_upload_sales_resume_controller.rb
@@ -1,5 +1,10 @@
 class BulkUploadSalesResumeController < ApplicationController
   before_action :authenticate_user!
+  before_action :set_no_cache_headers
+
+  def set_no_cache_headers
+    response.set_header("Cache-Control", "no-store")
+  end
 
   def start
     @bulk_upload = current_user.bulk_uploads.find(params[:id])
diff --git a/spec/requests/bulk_upload_sales_resume_controller_spec.rb b/spec/requests/bulk_upload_sales_resume_controller_spec.rb
index df4540713..07186420b 100644
--- a/spec/requests/bulk_upload_sales_resume_controller_spec.rb
+++ b/spec/requests/bulk_upload_sales_resume_controller_spec.rb
@@ -30,6 +30,12 @@ RSpec.describe BulkUploadSalesResumeController, type: :request do
       expect(response.body).not_to include("Cancel")
     end
 
+    it "sets no cache headers" do
+      get "/sales-logs/bulk-upload-resume/#{bulk_upload.id}/fix-choice"
+
+      expect(response.headers["Cache-Control"]).to eql("no-store")
+    end
+
     context "and previosuly told us to fix inline" do
       let(:bulk_upload) { create(:bulk_upload, :sales, user:, bulk_upload_errors:, choice: "create-fix-inline") }
 
@@ -92,6 +98,12 @@ RSpec.describe BulkUploadSalesResumeController, type: :request do
 
       expect(response.body).to include("Are you sure")
     end
+
+    it "sets no cache headers" do
+      get "/sales-logs/bulk-upload-resume/#{bulk_upload.id}/confirm"
+
+      expect(response.headers["Cache-Control"]).to eql("no-store")
+    end
   end
 
   describe "PATCH /sales-logs/bulk-upload-resume/:ID/confirm" do