Thursday, October 6, 2011

cache_page: force reload

Hi,

up to now cache_page ignores "pragma no-cache" (shift-ctrl-r in firefox).

I think this ticket should be looked at again:

https://code.djangoproject.com/ticket/10225#comment:5
Cache middleware does not honor "Cache-Control: no-cache" in request headers

{{{
A normal reload (F5 or ctrl-r) does not set the request header "Pragma: no-cache". Only shift-ctrl-r or ctrl-f5 sets it.
The current implementation (ignoring pragma no-cache) does not help you, if someone wants to bring your site down. I
think this is a valid ticket and pragma no-cache should not be ignored.

BTW, if you are a developer and want to force a reload, you can add a query-string: http://..../foo/?x

If you are afraid of denial of service attacks, an attacker could send you a different query-string in every request!
}}}

Thomas

--
Thomas Guettler, http://www.thomas-guettler.de/
E-Mail
: guettli (*) thomas-guettler + de

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To post to this group, send email to django-users@googlegroups.com.
To unsubscribe from this group, send email to django-users+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/django-users?hl=en.

No comments:

Post a Comment