Ok, I managed to fix this by adding my own filter that modifies the
response.  The contents of my doFilter method is this:

    if (response instanceof HttpServletResponse) {
      HttpServletResponse resp = (HttpServletResponse) response;
      resp.setHeader("Cache-control", "no-cache");
      resp.setHeader("Cache-control", "no-store");
      resp.setHeader("Pragma", "no-cache");
      resp.setHeader("Expires", "0");
    }
    chain.doFilter(request, response);

If anyone can think of a better way to handle this, let me know!

-----Original Message-----
From: Ben Hall [mailto:[EMAIL PROTECTED]
Sent: 12 September 2003 10:14
To: '[EMAIL PROTECTED]'
Subject: [OS-webwork] Caching pages after invalidating session


I'm trying to expire my pages after i've invalidated my session within
webwork and i'm having problems.  If I log out (invalidate) and the hit back
on my browser then everything's still there.  If I try and do something with
that information, I get redirected to back to my sign on page as there's no
session available.  I'd rather the user wasn't able to hit back and track
through what the previous user did.

I've put meta directives in such as:

<meta HTTP-EQUIV="Cache-Control" CONTENT="no-cache">
<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">
<meta HTTP-EQUIV="Expires" CONTENT="-1">

But i'm not having any luck.

Has anyone had any experience with this ?

Ben.










This email and any attachments are strictly confidential and are intended
solely for the addressee. If you are not the intended recipient you must
not disclose, forward, copy or take any action in reliance on this message
or its attachments. If you have received this email in error please notify
the sender as soon as possible and delete it from your computer systems.
Any views or opinions presented are solely those of the author and do not
necessarily reflect those of HPD Software Limited or its affiliates.

 At present the integrity of email across the internet cannot be guaranteed
and messages sent via this medium are potentially at risk.  All liability
is excluded to the extent permitted by law for any claims arising as a re-
sult of the use of this medium to transmit information by or to 
HPD Software Limited or its affiliates.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Opensymphony-webwork mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork


This email and any attachments are strictly confidential and are intended
solely for the addressee. If you are not the intended recipient you must
not disclose, forward, copy or take any action in reliance on this message
or its attachments. If you have received this email in error please notify
the sender as soon as possible and delete it from your computer systems.
Any views or opinions presented are solely those of the author and do not
necessarily reflect those of HPD Software Limited or its affiliates.

 At present the integrity of email across the internet cannot be guaranteed
and messages sent via this medium are potentially at risk.  All liability
is excluded to the extent permitted by law for any claims arising as a re-
sult of the use of this medium to transmit information by or to 
HPD Software Limited or its affiliates.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Opensymphony-webwork mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork

Reply via email to