[3049] in WWW Security List Archive
RE: litle example of no-cache please!
daemon@ATHENA.MIT.EDU (David W. Morris)
Tue Sep 24 13:36:31 1996
Date: Tue, 24 Sep 1996 08:48:31 -0700 (PDT)
From: "David W. Morris" <dwm@shell.portal.com>
To: Dev Kumar Roy <devroy@pluto.xko.dec.com>
cc: =?iso-8859-1?Q?=27S=E9rgio_Cruz_Esteves=27?= <sergio@uol.com.br>,
"'www-security@ns2.rutgers.edu'" <www-security@ns2.rutgers.edu>
In-Reply-To: <c=US%a=_%p=dec%l=PLUTO-960924045555Z-6@pluto.xko.dec.com>
Errors-To: owner-www-security@ns2.rutgers.edu
There is nothing in HTTP 1.0 or 1.1 which requires a server to parse HTML
and extract / utilize the value of <META> tags. There is nothing which
requires a browser to honor <META> tags. Since this code example was
originally posted as an IIS solution, I assumed that that specific
server did in fact parse the HTML and add the <META> data to the HTTP
headers.=20
Secondly, you must have a browser which will at least respond to the HTTP
headers as you expect. HTTP/1.1 defines caching behavior very carefully
but explicity excludes the history mechanism behavior other than to=20
describe the distinction. HTTP/1.1 browsers should be able to respond
the the cache control header as defined. If IIS uses the <META> tag to
augment HTTP headers, then that should work (but not pragma) otherwise
you'll have to find a solution which works in the context of your
server software.
Dave Morris
On Tue, 24 Sep 1996, Dev Kumar Roy wrote:
> Sergio,
> Your code is correct but I am pretty sure when I tried it on IE1.5 I was
> unable to do it,someone told me that HTTP1.1 will overcome this.I tried
> this in two was ,first I tried hard coding it as you have done so then I
> tried setting the header to no-cache in both instances it did not seem
> to work.
>=20
> >From: =09S=E9rgio Cruz Esteves[SMTP:sergio@uol.com.br]
> >
> >Horacio Fontanini wrote:
> >>=20
> >> Can someone send me a litle html file with no-cache directive
> >> that works with IIS.
> >> TIA
> >
> >Try
> >=09<HEAD>
> > <META HTTP-EQUIV=3D"Pragma" CONTENT=3D"no-cache">
> > </HEAD
> >
> >[]s
