#15855: cache_page decorator bypasses any Vary headers set in middleware
-------------------------------------+-------------------------------------
               Reporter:  carljm     |          Owner:  nobody
                   Type:  Bug        |         Status:  new
              Milestone:             |      Component:  Core (Cache system)
                Version:             |       Severity:  Normal
             Resolution:             |       Keywords:
           Triage Stage:  Design     |      Has patch:  1
  decision needed                    |    Needs tests:  0
    Needs documentation:  0          |  Easy pickings:  0
Patch needs improvement:  0          |
                  UI/UX:  0          |
-------------------------------------+-------------------------------------

Comment (by carljm):

 In [16362]:
 {{{
 #!CommitTicketReference repository="" revision="16362"
 [1.3.X] Refs #15855 -- Recommended the csrf_protect decorator rather than
 vary_on_cookie as workaround for cache_page caching the response before it
 gets to middleware.

 Backport of r16361 from trunk.
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/15855#comment:11>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to