We discovered a rather serious issue today.
It turns out that
1: Britesnow removes HTTP cache control headers that has been set pre-chain (for example by a filter running before Britesnow does)
2: Britesnow closes the connection to the browser, making it impossible to set/fix the http caching header after Britesnow, post-chain.
com/britesnow/snow/web/WebController.java:400:
res.setHeader("Cache-Control", "no-cache,no-store,max-age=0");
Then in line 405, same file:
rc.getWriter().close();
I suggest that Britesnow does not do this, it should be up to the web application stack to decide how caching is handled, not Britesnow. The result now is that nothing in our web application will get cached. Neither in Varnish(which we use to cache up the whole web application), or in the clients browers.
We discovered a rather serious issue today.
It turns out that
1: Britesnow removes HTTP cache control headers that has been set pre-chain (for example by a filter running before Britesnow does)
2: Britesnow closes the connection to the browser, making it impossible to set/fix the http caching header after Britesnow, post-chain.
com/britesnow/snow/web/WebController.java:400:
res.setHeader("Cache-Control", "no-cache,no-store,max-age=0");
Then in line 405, same file:
rc.getWriter().close();
I suggest that Britesnow does not do this, it should be up to the web application stack to decide how caching is handled, not Britesnow. The result now is that nothing in our web application will get cached. Neither in Varnish(which we use to cache up the whole web application), or in the clients browers.