On Wed, 14 Aug 2002, alex wrote:
Ivan,

You can use the JavaScript location.replace to prevent entries in the
history object.

You might also want to consider using a hidden frame as well.

HTH

> hi ivan,
>
> the caching problem should be solved using the following line in front
> of your ASP pages;
>
> response.expires = -1
>
> and about the back buttons, i dont think you can disable the back buttons.
>
> --alex
>
> ----- Original Message -----
> From: "Ivan Hernandez" <ivan.hernandezglobalsis.com.ar>
> To: <webappsecsecurityfocus.com>
> Sent: Wednesday, August 14, 2002 4:14 PM
> Subject: Two problems.
>
>
> > Hello. I'm in a development group building an intranet solution running
> > over IIS/5.0 with SSL3 and an internal Certification Server plus .NET.
> > The targeted client browser is Internet Explorer 5.0. We need to:
> > 1) Disable the back button from working with forms.
> > 2) Disable client caching (nothing saved locally except the session ID
> > cookie)
> >
> > All this needs to be acomplished using the standart IE5 settings. I
> > mean... using http headers and all that things.
> > Someone with experience or information?
> >
> > Thanks
> >
> > Ivan Hernandez
> >
> >
>

-- 
Regards,
Wm. G. Urquhart
Custom Software Solutions
http://www.wurquhart.co.uk

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]