Changeset 496da6a in github

Timestamp:

Nov 23, 2009 2:25:43 PM (3 years ago)

Author:

alecpl <alec@…>

Branches:

master, HEAD, courier-fix, dev-browser-capabilities, pdo, release-0.6, release-0.7, release-0.8

Children:

a5f430d

Parents:

c96c5a9

Message:

• Fix possible messages exposure when using Roundcube behind a proxy (#1486281)

Files:

• CHANGELOG (modified) (1 diff)
• program/include/rcube_shared.inc (modified) (1 diff)

CHANGELOG

@@ -2 +2 @@
 ===========================
 
+- Fix possible messages exposure when using Roundcube behind a proxy (#1486281)
 - Fix unicode para and line separators in javascript response (#1486310)
 - additional_message_headers: allow unsetting headers, support plugin's config file (#1486268)

program/include/rcube_shared.inc

@@ -94 +94 @@
     header("Last-Modified: ".gmdate("D, d M Y H:i:s", $mdate)." GMT");
   
-  header("Cache-Control: max-age=0");
+  header("Cache-Control: private, must-revalidate, max-age=0");
   header("Expires: ");
   header("Pragma: ");