OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: How to prevent Internet Explorer from locally caching pages

From: David Cameron (dcameronitis-now.com)
Date: Thu Apr 03 2003 - 19:16:18 CST


Try setting the cache-control to private, pragma to no-cache as well as setting the page to expired.

regards
David Cameron
nOw.b2b
dcameronitis-now.com

> -----Original Message-----
> From: Adrian Caneva [mailto:acanevanexttech.com.ar]
> Sent: Friday, 4 April 2003 10:27 AM
> To: webappsecsecurityfocus.com
> Subject: How to prevent Internet Explorer from locally caching pages
>
>
>
>
> Hi,
>
> Expiration headers seem to be ignored by Internet Explorer
> behind a Proxy
>
> server when using BACK / FORWARD buttons.
>
> On Microsoft's Knowledge Base Article 234067 (HOWTO: Prevent
> Caching in
>
> Internet Explorer) I've found that in fact this can happen.
>
> And I could verify that, behind a Proxy, IE (6.0, 5.5, 5.0)
> gets the page
>
> from local disk cache although Expire = -1 header should
> force it ask the
>
> web server for an updated version.
>
> The only workaround I've found was to place dynamic pages in
> an https://
>
> environment where (Pragma, no-cache) header prevents IE from
> storing in
>
> local cache the response.
>
> Any better ideas ?
>
>
>
> Thanks very much in advance.
>
> Regards,
>
>
>
> Adrian Caneva
>
>