Web Browser Caching and 302 Response

Hey folks,

I am currently experiencing a problem with web browsers returning a cached decorated pages, rather obtaining a "freshly" decorated page from the server. I have analyzed the HTTP headers and have verified "no-cache" headers are set. I have also noticed the server is returning a NOT MODIFIED response (HTTP 302 status) to conditional GET requests (If-Modified-Since) for static content bodies. I think the browser is then displaying the page from its cache (inappropriately decorated with a header and left nav from a previous user-- a security risk).

Any help anyone can provide would be appreciated. I look forward to your reply.

ENVIRONMENT
Browser: IE 6 and FireFox
Server-Side: SiteMesh 2.2.1 with Struts 1.1 on BEA Weblogic 8.1.4  SP4 (J2EE 1.3, Servlet 2.3) hosted on Solaris.

WEB APPLICATION
The web application is using SiteMesh to decorate bodies of static and dynamic content with a left nav and header. The left nav and header present menu options based off the user's entitlements (security roles). The user requests decorated bodies of static content using the URL of the htm file. The SiteMesh PageFilter is configured to filter all requests (*) (known workaround for BEA Weblogic).

---------------------------------------------------------------------
Posted via Jive Forums
http://forums.opensymphony.com/thread.jspa?threadID=6209&messageID=14054#14054


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]