I have created a few small flash widgets that stream .mp3 audio from an Apache/php host. The mp3 file cannot be directly accessed and does not save it self to the browsers cache. To do this I set the mp3 file permission on the host to "owner: read/write" (numeric value 600). This makes it so that only my .php file can read the .mp3. Th...
I understand there is a HTTP response header directive to disable page caching: Cache-Control:no-cache I can modify the header by "hand": <%response.addHeader("Cache-Control","no-cache");%> But is there a "nice" way to make the JSP interpreter return this header line in the server response? (I checked the <%@page ...%> directive....
I'm told to prevent user-info leaking, only "no-cache" in response is not enough. "no-store" is also necessary. Cache-Control: no-cache, no-store After reading this spec http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html, I'm still not quite sure why. My current understanding is that it is just for intermediate cache server. Even...
I am working on a Java/Struts application that uses Tomcat 6.0.10. It's a typical web application that allows users to edit some forms, and streams PDFs. Way back, we added: <security-constraint> <web-resource-collection> <web-resource-name>GeneralRequests</web-resource-name> <url-pattern>/WR1/*</url-pattern> </w...
Hello, I have a PHP page (a.php) which is already sending these headers: <?php header('Cache-Control: no-cache, no-store, max-age=0, must-revalidate'); header('Expires: Mon, 26 Jul 1997 05:00:00 GMT'); header('Pragma: no-cache'); ?> And on the PHP page (a.php) , it has a link to another page (b.html) on b.html, it has a javascript...
I'm writing a client that is making repeated http requests for xml data that is changing over time. It looks like the Android stack is caching my page requests and returning the same page repeatedly. How do I make sure it gets a fresh page each time? -- code --- HttpClient client = new DefaultHttpClient(); HttpGet request = new HttpG...
What is the proper way to set cache control? Sometimes I see the use of headers[] self.response.headers["Pragma"]="no-cache" self.response.headers["Cache-Control"]="no-cache, no-store, must-revalidate, pre-check=0, post-check=0" self.response.headers["Expires"]="Thu, 01 Dec 1994 16:00:00" Other times, I see headers.add_header() self...
This is probably a duplicate question but none of the solutions I've found by searching the internet will validate at w3c. I don't have granular control at the document-level on the hosting-company's server, so I need to include the no-cache directive in the document itself. Are cache directives inside the document permitted in HTML5? ...
I'm unable to force a page to always expire in Safari. Chrome, IE and Firefox are good citizens but Safari is cruising along just fine with ignoring the following ASP.NET code: // Expire immediately Response.Expires = 0; Response.Cache.SetNoStore(); Response.AppendHeader("Pragma", "no-cache"); Any recommendations? ...
Implemented JAAS and SSL on jBoss 4.2.2 and found the issue with being unable to download .pdf's. after some poking around I found references to the Pragma: No-cache and Cache-Control: no-cache headers, and why that prevents IE from downloading .pdf's and related items. Fine, I stuffed Cache-control, private and Pragma, "" in the header...