WebApp Sec mailing list archives
RE: Meaning of "disabling browser caching"
From: "Martin O'Neal" <martin.oneal () corsaire com>
Date: Tue, 9 May 2006 10:44:57 +0100
As a generic suggestion (that works for the majority of situations, on the majority of browsers) you are looking for something like: Pragma: No-cache Cache-control: no-cache, no-store, private, must-revalidate, max-age=0 Expires: 0 This won't stop the back button working, but it will suggest to the browser that it should read the content from the site again, not simply redisplay it from the cache. The acid test of whatever measures you use is to use ethereal or a MITM proxy to see what is actually requested by the browser, and when. Also, open your local cache directory and see what the browser is really storing to disk... Martin... ---------------------------------------------------------------------- CONFIDENTIALITY: This e-mail and any files transmitted with it are confidential and intended solely for the use of the recipient(s) only. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon this information by persons or entities other than the intended recipient(s) is prohibited. If you have received this e-mail in error please notify the sender immediately and destroy the material whether stored on a computer or otherwise. ---------------------------------------------------------------------- DISCLAIMER: Any views or opinions presented within this e-mail are solely those of the author and do not necessarily represent those of Corsaire Limited, unless otherwise specifically stated. ---------------------------------------------------------------------- Corsaire Limited, 3 Tannery House, Tannery Lane, Send, Surrey, GU23 7EF Telephone: +44(0)1483-226000 Email:info () corsaire com ------------------------------------------------------------------------- Sponsored by: Watchfire Methodologies & Tools for Web Application Security Assessment With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this whitepaper today! https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9h --------------------------------------------------------------------------
Current thread:
- Meaning of "disabling browser caching" smith . norton (May 09)
- <Possible follow-ups>
- RE: Meaning of "disabling browser caching" Martin O'Neal (May 09)