Don't cache Set-Cookie headers
A giant security hole.
Eelco Dolstra committed
Nov 11, 2014 at 14:32 UTC
b43b17e22f42cb2ec6321748d205a1224dc96057
1 file changed
+1
delft/delft-webserver.nix
+1
@@ -74,6 +74,7 @@ let
74
CacheEnable disk /
75
CacheRoot ${hydraCacheDir}
76
CacheMaxFileSize 64000000
77
+ CacheIgnoreHeaders Set-Cookie
78
79
<Location />
80
SetOutputFilter DEFLATE