Bugzilla should set Cache-Control: private on all requests (until we can do something more flexible)

NEW
Unassigned

Status

()

Bugzilla
Bugzilla-General
P5
normal
2 years ago
2 years ago

People

(Reporter: dylan, Unassigned, Mentored)

Tracking

({good-first-bug})

5.1.1
good-first-bug

Details

(Whiteboard: [good first bug])

If a bugzilla user wants to run it behind a CDN like fastly, the reverse proxy may cache the result of show_bug.cgi, including show_bug.cgi on a private bug. 
Setting Cache-Control: private in $cgi->header() should alleviate this.

However if Cache-Control is already set, nothing should be done. Hopefully we can begin to do even smarter things so that bugzilla sites can run behind fast CDNs.
The code in question would be https://github.com/bugzilla/bugzilla/blob/master/Bugzilla/CGI.pm#L275-L345
CGI.pm does some name mangling, so the value would be $headers{Cache_Control}.
Mentor: dylan
You need to log in before you can comment on or make changes to this bug.