You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Bart van der Schans <b....@onehippo.com> on 2011/10/31 13:58:06 UTC

Add Set-Cookie to default cache ignore headers?

Hi all,

Is there any valid reason to allow mod_cache to cache Set-Cookie
headers? Recently we encountered some problems because of this
behavior [1]. Of course you can always configure mod_cache to not
cache header, but to me it would make sense to add it to the list of
default ignored headers [2]. The attached patch is rather trivial..

Regards,

Bart


[1] http://confluence.atlassian.com/display/CONFKB/Request+Assumes+Identity+of+Another+User+who+Logs+in+Concurrently+Due+to+Apache+CacheIgnoreHeaders
[2] http://httpd.apache.org/docs/2.2/mod/mod_cache.html#cacheignoreheaders