Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Robert Klemme Newsgroups: comp.lang.java.programmer Subject: Re: Browser Back Button Date: Sun, 22 Jan 2017 13:52:37 +0100 Lines: 34 Message-ID: References: <9fc9d84a-b4a7-45a6-a47a-ab7d885bf5ce@googlegroups.com> <0dec1ad1-3625-4ac6-91aa-9b176256554b@googlegroups.com> <95e6be02-ad5b-41d6-a205-c33aa6b448e2@googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Trace: individual.net w2Tf3YTetOUmdCgT3I8r/QYuBGre/0nLAlc0vpNfBfWzCIpgU= Cancel-Lock: sha1:gUwpJbhCU2z8dliOLiifI9ORcOE= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 In-Reply-To: <95e6be02-ad5b-41d6-a205-c33aa6b448e2@googlegroups.com> Xref: csiph.com comp.lang.java.programmer:36212 On 21.01.2017 20:43, Davej wrote: > On Wednesday, January 11, 2017 at 12:13:35 PM UTC-6, Robert Klemme wrot= e: >> On 11.01.2017 01:49, Arne Vajh=C3=B8j wrote: >>> I would not like to run with a filter that barfs on redirects. >> >> Agree. This is a typical use case for using a Filter. > What about the practice of placing this at the top of a JSP? > > <%@page contentType=3D"text/html" pageEncoding=3D"UTF-8"%> > <%@taglib prefix=3D"c" uri=3D"http://java.sun.com/jsp/jstl/core" %> > <% > response.setHeader("Cache-Control", "no-cache, no-store, must-reval= idate"); // HTTP 1.1. > response.setHeader("Pragma", "no-cache"); // HTTP 1.0. > response.setHeader("Expires", "0"); // Proxies. > %> > > [...etc...] > You do not want to have this type of functionality (detect that someone=20 is not logged in and redirect to the login page) in every JSP. Cheers robert --=20 remember.guy do |as, often| as.you_can - without end http://blog.rubybestpractices.com/