Skip to content

v0.1.3: Disable redirect caching to prevent agrressive redirections (#12)

Latest
Latest

Choose a tag to compare

View all tags
@Alogani Alogani released this 30 Jan 19:17
· 1 commit to main since this release
v0.1.3
7202f02
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode. 
Prevent caching of auth redirect, admin dashboard pages, and login page

    Set Cache-Control/Pragma and Vary: Cookie on unauthenticated redirect responses
    Mark admin dashboard index and action result pages as uncacheable
    Mark GET/POST login responses as uncacheable so dynamic messages and redirects are fresh

Fixes cached redirect to /auth/login being reused after login by some browsers/proxies.
Assets 4
Loading