On Tue, 2009-03-03 at 13:48 -0800, davathar wrote: > I'm using @never_cache as follows and IE7 has the correct behavior, > but Firefox 3.06 allows me to view the content of all previous pages > by clicking the back button even after going through a logout.
[....] > So, is this a feature waiting to be developed? Or is there a way to > make it work right with the existing code? Django does a reasonable, but not sterling, job in this particular case. We need to add a few more "no really, we seriously mean it" headers for the don't cache situation. The GMail instance is closer to the real thing for never caching. Right now Django is serving up "never_cache" as "always stale", however browsers and intermediate caches are permitted to serve stale instance under certain circumstances (and, when you throw in buggy implementations, even more often than that). You're seeing the variations of interpretation between your IE and Firefox experiments, for example. It's a difficult area and not particularly well (and definitely not consistently) implemented across browsers. I suspect it might be provable that, in this case, both browsers are doing a correct thing, if you look hard enough at the specs (particularly when you throw in offline browsing considerations). In conclusiong, though, we can and will, at some point, throw in a few more headers in this particular case. Regards, Malcolm --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---