RE: Prevent caching of pdf files

From: Michael Wojcik (Michael.Wojcik_at_microfocus.com)
Date: 12/08/03

  • Next message: Michael Wojcik: "RE: Prevent caching of pdf files" 
    To: SECPROG@securityfocus.com
Date: Mon, 8 Dec 2003 07:23:08 -0800

    > From: pgut001@cs.auckland.ac.nz [mailto:pgut001@cs.auckland.ac.nz]
    > Sent: Friday, December 05, 2003 11:24 PM
    >
    > bsec <bsec@cotse.net> writes:
    >
    > >Currently on a secure Internet application we use the "Cache-Control: No
    > >Cache" header to prevent information from caching on client machines.
    >
    > Cache-Control is an HTTP 1.1 (meaning it'll be ignored by
    > HTTP 1.0) indication that the cache shouldn't return a cached response
    > without revalidating with the origin server.

    I assume this should be "no-cache is an...". "Cache-Control" is the name of
    the header; "no-cache" is a directive that may be supplied as the value of
    that header, which has the semantics you describe.

    > What you want is no-store.

    ...which is another directive that may be supplied as the value of a
    Cache-Control header. (See RFC 2616 14.9.2.)

    Just wanted to clarify that for other readers. 

    -- 
Michael Wojcik
Principal Software Systems Developer, Micro Focus
  • Next message: Michael Wojcik: "RE: Prevent caching of pdf files"

    Relevant Pages

    • Re: Capture request/response HTTP headers with VBA
      ... Function GetHeader(sURL As String) As String ... ..Navigate "http://my.msn.com"; ... my address bar and hitting enter on my keyboard, i get all this header ... Cache-Control: no-cache ...
      (microsoft.public.excel.programming)
    • RE: Prevent caching of pdf files
      ... controlled by the "cache-control" directive in the response header. ... Cache" header to prevent information from caching on client machines. ... We would like to begin to provide pdf files via our application; ... when the no-cache header is used. ...
      (SecProg)
    • Interacting with AJAX???
      ... Asynchronous Javascript. ... I need to automate the saving of a record. ... http request header sent and then I can just recreate this header and send ... Cache-Control: no-cache ...
      (microsoft.public.inetsdk.programming.webbrowser_ctl)
    • Re: [Full-disclosure] [x0n3-h4ck.org] PayPal vulnerable to XSS
      ... XSS are usually called as - "Unfiltered Header Injection in Apache". ... Pragma: no-cache ... [Full-disclosure] PayPal vulnerable to XSS ...
      (Full-Disclosure)
    • Re: why different contents when Iget web page by IE and vb control mswinsck.ocx?
      ... Pragma: no-cache ... Expires: -1 ... Server: www.checkthisout.tab.com.au ... are these header fields and values? ...
      (microsoft.public.vb.controls)