Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: RE: How to prevent Internet Explorer from locally caching pages

RE: How to prevent Internet Explorer from locally caching pages

From: David Cameron <dcameron_at_itis-now.com>
Date: Fri, 4 Apr 2003 11:16:18 +1000

Try setting the cache-control to private, pragma to no-cache as well as setting the page to expired.

regards
David Cameron
nOw.b2b
dcameron_at_itis-now.com

> -----Original Message-----
> From: Adrian Caneva [mailto:acaneva_at_nexttech.com.ar]
> Sent: Friday, 4 April 2003 10:27 AM
> To: webappsec_at_securityfocus.com
> Subject: How to prevent Internet Explorer from locally caching pages
>
>
>
>
> Hi,
>
> Expiration headers seem to be ignored by Internet Explorer
> behind a Proxy
>
> server when using BACK / FORWARD buttons.
>
> On Microsoft's Knowledge Base Article 234067 (HOWTO: Prevent
> Caching in
>
> Internet Explorer) I've found that in fact this can happen.
>
> And I could verify that, behind a Proxy, IE (6.0, 5.5, 5.0)
> gets the page
>
> from local disk cache although Expire = -1 header should
> force it ask the
>
> web server for an updated version.
>
> The only workaround I've found was to place dynamic pages in
> an https://
>
> environment where (Pragma, no-cache) header prevents IE from
> storing in
>
> local cache the response.
>
> Any better ideas ?
>
>
>
> Thanks very much in advance.
>
> Regards,
>
>
>
> Adrian Caneva
>
>
Received on Apr 04 2003

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos