Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër

Dear Mozilla Team, How can i prevent a page being viewed from cache from "Work Offline" mode after user is logged out? We are working on Java technologies.

  • 7 përgjigje
  • 5 e kanë hasur këtë problem
  • 4 parje
  • Përgjigjja më e re nga alpesh.parmar27

more options

Dear Team,

We are working on bank application where security is primary concern (but obvious).

In Firefox, following scenario is security leak.

1. User logged in using normal online mode and do the transaction and logged out. 2. Another user takes the browser, goes to "Work Offline" mode. 3. From history, another user can access all the pages first user accessed.

Please revert on urgent basis.

Dear Team, We are working on bank application where security is primary concern (but obvious). In Firefox, following scenario is security leak. 1. User logged in using normal online mode and do the transaction and logged out. 2. Another user takes the browser, goes to "Work Offline" mode. 3. From history, another user can access all the pages first user accessed. Please revert on urgent basis.

Krejt Përgjigjet (7)

more options

You can have Firefox clear the history, when closing. See:

Delete browsing, search and download history on Firefox

more options

Note that Firefox will disable the disk cache entirely if you use "Clear history when Firefox closes" to clear the cache (see about:cache this is missing the disk cache section in this case).

It would be best to use Private Browsing mode to visit websites from which you do not want to keep history.

more options

Dear All,

Thanks for the reply.

As informed, we are working on Bank application. So end users can be anyone. Hence we cannot force our user to do so.

Is there any possibility to disable "Work Offline" option ?? Or prevent a page from being accessed from cache in "Work Offline" mode ?

Thanks

Alpesh

more options

Is there any possibility to disable "Work Offline" option ?

Not from your end, only the user can changes prefs like that.

Is there a reason that you can't use no cache for those pages?
Or check with Java about how to not use the "Offline Web Content" cache with Java?

more options

You can probably do this by requesting all data via an XMLHttpRequest, so that only the page with the JavaScript code is cached, but not the actual data.

more options

Dear cor-el,

In bank application, we are not allowed to use such javascript objects to flow. We are using JSP as a view.

Any particular suggestion for Java ?

Thanks

more options

Dear the-edmeister,

We are using following code in HTML to prevent it from being cached. But its not working out.

<meta http-equiv="cache-control" content="no-cache" />
<meta http-equiv="expires" content="0" />
<meta http-equiv="expires" content="Tue, 01 Jan 1980 1:00:00 GMT" />
<meta http-equiv="pragma" content="no-cache" />
</head>

Thanks

Ndryshuar nga cor-el