You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@allura.apache.org by Dave Brondsema <da...@brondsema.net> on 2017/05/01 17:01:26 UTC
[allura:tickets] #8153 Stronger no-cache headers
---
** [tickets:#8153] Stronger no-cache headers**
**Status:** in-progress
**Milestone:** unreleased
**Labels:** security
**Created:** Mon May 01, 2017 05:01 PM UTC by Dave Brondsema
**Last Updated:** Mon May 01, 2017 05:01 PM UTC
**Owner:** Dave Brondsema
If you're logged in and then log out, hitting the back button will still show the previous page(s) potentially with private info on them.
Pylons defaults to `Cache-Control: no-cache` header, but that isn't always enough and there are a lot more caching directives that can be included in there.
---
Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
[allura:tickets] #8153 Stronger no-cache headers
Posted by Dave Brondsema <da...@brondsema.net>.
- **status**: in-progress --> review
- **Comment**:
On branch db/8153
---
** [tickets:#8153] Stronger no-cache headers**
**Status:** review
**Milestone:** unreleased
**Labels:** security
**Created:** Mon May 01, 2017 05:01 PM UTC by Dave Brondsema
**Last Updated:** Mon May 01, 2017 05:01 PM UTC
**Owner:** Dave Brondsema
If you're logged in and then log out, hitting the back button will still show the previous page(s) potentially with private info on them.
Pylons defaults to `Cache-Control: no-cache` header, but that isn't always enough and there are a lot more caching directives that can be included in there.
---
Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
[allura:tickets] #8153 Stronger no-cache headers
Posted by Kenton Taylor <kt...@slashdotmedia.com>.
- **status**: review --> closed
- **Comment**:
Merged.
---
** [tickets:#8153] Stronger no-cache headers**
**Status:** closed
**Milestone:** unreleased
**Labels:** security
**Created:** Mon May 01, 2017 05:01 PM UTC by Dave Brondsema
**Last Updated:** Mon May 01, 2017 06:17 PM UTC
**Owner:** Dave Brondsema
If you're logged in and then log out, hitting the back button will still show the previous page(s) potentially with private info on them.
Pylons defaults to `Cache-Control: no-cache` header, but that isn't always enough and there are a lot more caching directives that can be included in there.
---
Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/
To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.