tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 51712] New: Regression in cache-control headers for requests with security-constraints
Date Tue, 23 Aug 2011 20:55:25 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=51712

             Bug #: 51712
           Summary: Regression in cache-control headers for requests with
                    security-constraints
           Product: Tomcat 7
           Version: 7.0.16
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: regression
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: zampani@amazon.com
    Classification: Unclassified


Created attachment 27428
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=27428
Patch to revert isSecure() check

Copied from http://markmail.org/thread/rlkpd3hqihc3zbji

CLN 1126273
http://svn.apache.org/viewvc?view=revision&revision=1126273
sets the default value for securePagesWithPragma to false, but also (re)added a
request.isSecure() check to the block for adding the cache-control headers.

This results in the headers not being added for secure requests with
security-constraints.  This is a change in behavior from Tomcat-7.0.14 that
causes IE8 to improperly cache some secure pages.

The secure check was initially added in CLN 287690
http://svn.apache.org/viewvc?view=revision&revision=287690
to fix a bug in IE caching
https://issues.apache.org/bugzilla/show_bug.cgi?id=6641
but was commented out in CLN 302373
http://svn.apache.org/viewvc?view=revision&revision=302373

patch to remove isSecure() check added.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message