Download as
Browse Code »

Commit 191cbc164829db70588c9a6569eec981eb18becf

Authored by Antonio Terceiro
1 parent 62419e2b
Exists in master and in 27 other branches 1.2+SPB2, 2_split_by_role, add_fields_in_api, api_fixies, api_pagination, api_private_token, api_tasks, article_hit_count, blog_page_bug, checkbox_to_user_can_edit_page, communities_ratings, communities_ratings_moderation, community_ratings_rebase, fix_cloned_article_parent, fix_gallery_image_url, fix_javascript_categories, fix_optional_fields, fix_suggest_article, fix_user_email_validation, highlight_block_fix, notification_plugin, notification_plugin_rebase, script_to_update, split_by_role, temp_ratings, tests, tests_fixies

varnish: don't leak HTTP cache headers to clients 

This fixes issues when a not-logged-id user logs in, but still sees an
old page. This is because the user's browser has cached the page due to
having received it with 'Cache-Control: public, ...' headers. Now we
make varnish overwrite to always set 'Cache-Control: no-cache' so that
clients will always hit the server again.

For not-logged-in users will also always hit the server, but varnish
will still handle the requests directly for as long as it has a valid
cached version of the page.
Showing 1 changed file with 7 additions and 0 deletions   Show diff stats
etc/noosfero/varnish-noosfero.vcl
  Diff comments   View file @191cbc1
... ... @@ -10,6 +10,13 @@ sub vcl_recv {
10 10 }
11 11 }
12 12  
  13 +sub vcl_deliver {
  14 + # Force clients to aways hit the server again for HTML pages
  15 + if (resp.http.Content-Type ~ "^text/html") {
  16 + set resp.http.Cache-Control = "no-cache";
  17 + }
  18 +}
  19 +
13 20 sub vcl_error {
14 21 set obj.http.Content-Type = "text/html; charset=utf-8";
15 22  
... ...