mastodon/app/controllers/settings
Daniel Axtens 4d85c27d1a
Add 'private' to Cache-Control, match Rails expectations (#20608)
Several controlers set quite intricate Cache-Control headers in order to
hopefully not be cached by any intermediate proxies or local caches. Unfortunately,
these headers are processed by ActionDispatch::HTTP::Cache in a way that squashes
and discards any values set alongside no-store other than private:
8015c2c2cf/actionpack/lib/action_dispatch/http/cache.rb (L207-L209)

We want to preserve no-store on these responses, but we might as well remove
parts that are going to be dropped anyway. As many of the endpoints in these
controllers are private to a particular user, we should also add "private",
which will be preserved alongside no-store.
2022-11-16 04:56:30 +01:00
..
exports
…
migration
…
preferences
…
two_factor_authentication Explicitly set userVerification to discoraged (#16545) 2021-08-26 09:51:22 -05:00
aliases_controller.rb
…
applications_controller.rb
…
base_controller.rb Add 'private' to Cache-Control, match Rails expectations (#20608) 2022-11-16 04:56:30 +01:00
deletes_controller.rb
…
exports_controller.rb
…
featured_tags_controller.rb
…
imports_controller.rb
…
login_activities_controller.rb
…
migrations_controller.rb
…
pictures_controller.rb
…
preferences_controller.rb
…
profiles_controller.rb
…
sessions_controller.rb
…
two_factor_authentication_methods_controller.rb
…