Re: Cache-Control: no-store

On 11/30/2011 10:41 PM, Bjarne wrote:
>  > On Wed, 2011-11-30 at 12:49 -0500, Boris Zbarsky wrote:
>  >> On 11/30/11 8:16 AM, Bjarne wrote:
>  >>> Is the above the common understanding of this directive?
>  >>
>  >> The common understanding as used by actual sites is "don't cache, don't
>  >> allow via session history, make sure that someone walking up to a
>  >> computer can't use the back button to get this, ever".

In "netwerk/test/unit/test_cacheflags.js" there
is a test (second-last) for the combination
"no-store" and nsIRequest.LOAD_FROM_CACHE. It
expects to load the entry from cache. Can this
be correct? (nsIRequest.LOAD_FROM_CACHE is the
flag used by history, according to docs.)

Regards,
- Bjarne