Hi, I think you are disabling cache for incorrect page. You must disable caching for all pages that should not be available after logout, but you must do that when pages are sent to browser, not on logout action.
Best regards, Cezary On Thu, Oct 20, 2011 at 11:30 AM, Olga <baek_o...@list.ru> wrote: > I've tried > > @Log > public Object onActionFromLogout() > { > request.getSession(false).invalidate(); > > response.setHeader("Cache-Control", > > "no-cache,no-store,private,must-revalidate,max-stale=0,post-check=0,pre-check=0"); > response.setHeader("Pragma", "no-cache"); > response.setDateHeader ("Expires", 0); > } > > and > > <head> > <META Http-Equiv="Cache-Control" Content="no-store, no-cache, > max-age=0, > must-revalidate, private"></META> > <META Http-Equiv="Pragma" Content="no-cache"></META> > <META Http-Equiv="Expires" Content="0"> </META> > </head> > > but still doesn't work (( > > -- > View this message in context: > http://tapestry.1045711.n5.nabble.com/Browser-Back-Button-tp4909542p4920895.html > Sent from the Tapestry - User mailing list archive at Nabble.com. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org > For additional commands, e-mail: users-h...@tapestry.apache.org > >