Spring security 在SpringSecurity4.2中禁用静态资源的缓存

我在spring xml配置中有以下声明：

<security:headers>

我不希望此标头与静态资源一起发送。所以我试了一下：

<security:headers>
    <security:header ref="cacheStaticsHeaders" />
</security:headers>

<bean id="cacheStaticsHeaders" class="org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter">
   <constructor-arg>
        <bean class="org.springframework.security.web.util.matcher.AntPathRequestMatcher">
            <constructor-arg value="/images/**"/>
        </bean>
    </constructor-arg>
    <constructor-arg>
        <bean class="org.springframework.security.web.header.writers.StaticHeadersWriter">
            <constructor-arg name="headers">
                <list>
                    <bean class="org.springframework.security.web.header.Header">
                        <constructor-arg name="headerName" value="cache-control"></constructor-arg>
                        <constructor-arg name="headerValues" value="max-age=31536000"/>
                    </bean>
                    <bean class="org.springframework.security.web.header.Header">
                        <constructor-arg name="headerName" value="Expires"></constructor-arg>
                        <constructor-arg name="headerValues" value="31536000"/>
                    </bean>

                </list>
            </constructor-arg>
        </bean>
    </constructor-arg>
</bean>

我该如何解决这个问题？我第一次问这个问题，但没有得到回应

<security:headers>
    <security:header ref="cacheStaticsHeaders" />
</security:headers>

<bean id="cacheStaticsHeaders" class="org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter">
   <constructor-arg>
        <bean class="org.springframework.security.web.util.matcher.AntPathRequestMatcher">
            <constructor-arg value="/images/**"/>
        </bean>
    </constructor-arg>
    <constructor-arg>
        <bean class="org.springframework.security.web.header.writers.StaticHeadersWriter">
            <constructor-arg name="headers">
                <list>
                    <bean class="org.springframework.security.web.header.Header">
                        <constructor-arg name="headerName" value="cache-control"></constructor-arg>
                        <constructor-arg name="headerValues" value="max-age=31536000"/>
                    </bean>
                    <bean class="org.springframework.security.web.header.Header">
                        <constructor-arg name="headerName" value="Expires"></constructor-arg>
                        <constructor-arg name="headerValues" value="31536000"/>
                    </bean>

                </list>
            </constructor-arg>
        </bean>
    </constructor-arg>
</bean>

Cache-Control:max-age=31536000 cache-control: public 
Cache-Control:no-cache, no-store, max-age=0, must-revalidate