On Sun, 25 Sep 2005, Henrik Nordstrom wrote:
On Tue, 20 Sep 2005, Phil Bogle wrote:
* The x-cache-key directive overrides the actual URL used to fetch
the content for purposes of determining cache hits. It is typically used
to ignore session query string parameters that would otherwise prevent
caching.
How does this allow cache hits on URLs with session query strings?
Now I got it. This is a request header, not a response header.
Big fat alarm lamp on using this feature in a cache hierarchy. Could very
easily be abused for cache pollution purposes if not all involved caches
understands the directive..
Regards
Henrik
