4 ms·
I am currently building a site and this is definitely an experience that I can learn from. I am wondering, why was the homepage not being cached?
by alexbrand09 14y ago
I am currently building a site and this is definitely an experience that I can learn from. I am wondering, why was the homepage not being cached?
- zorlem 14y agoThere was a cookie set for CSRF protection and the headers specify that content should not be cached if there is a cookie (or more precisely - the cached content includes the cookie as a cache key, so each request with a different cookie gets a cache-miss).
- alexbrand09 14y agoHow would you circumvent this? I'm thinking that disabling CSRF is probably a bad idea. Maybe use AJAX to get the CSRF token after page load?
- digitalpbk 14y agoDeveloper here, since we had a click to open form at the time, we loaded the CSRF via AJAX. However that does not seem to be a good idea if we need it to work asap (and without javascript). I would look at something like SSI to put in the CSRF token to a cached page.
- Cherian 14y agoSlightly different. "Note that in 0.8.44 behaviour was changed to something considered more natural. As of 0.8.44 nginx no longer caches responses with Set-Cookie header and doesn't strip this header with cache turned on (unless you instruct it to do so with proxy_hide_header and proxy_ignore_headers). " http://forum.nginx.org/read.php?2,126312,126316#msg-126316 http://forum.nginx.org/read.php?2,126312,126316#msg-126316
- zorlem 14y agoThanks for the clarification.