On Tue, 2009-03-03 at 13:48 -0800, davathar wrote:
> I'm using @never_cache as follows and IE7 has the correct behavior,
> but Firefox 3.06 allows me to view the content of all previous pages
> by clicking the back button even after going through a logout.

[....]
> So, is this a feature waiting to be developed?  Or is there a way to
> make it work right with the existing code?

Django does a reasonable, but not sterling, job in this particular case.
We need to add a few more "no really, we seriously mean it" headers for
the don't cache situation. The GMail instance is closer to the real
thing for never caching.

Right now Django is serving up "never_cache" as "always stale", however
browsers and intermediate caches are permitted to serve stale instance
under certain circumstances (and, when you throw in buggy
implementations, even more often than that). You're seeing the
variations of interpretation between your IE and Firefox experiments,
for example. It's a difficult area and not particularly well (and
definitely not consistently) implemented across browsers. I suspect it
might be provable that, in this case, both browsers are doing a correct
thing, if you look hard enough at the specs (particularly when you throw
in offline browsing considerations).

In conclusiong, though, we can and will, at some point, throw in a few
more headers in this particular case.

Regards,
Malcolm



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to