706806 - "Cache-Control: no-store" on requests is not implemented

Status: RESOLVED DUPLICATE of bug 428916

(Core :: Networking: Cache, defect)

Description

[Bjarne (:bjarne)]

Attachment: Test for no-store requests

According to Rfc2616 section 14.9.2 the "no-store" cache-directive can be applied to both request and response. We handle only the latter. Attached is a patch with a test. The patch also adds a test-case to an existing unit-test to make it more relevant.

Comment 1

[Christian :Biesinger (don't email me, ping me on IRC)]

For the reasons I explained in dev.tech.network, I am skeptical about taking this with no real use case.

Comment 2

[Bjarne (:bjarne)]

See also bug #428916

Comment 3

[Binyamin]

The bug is still not fixed, not even on Firefox 29 Nightly.
On Chrome setRequestHeader('Cache-Control', 'no-cache') would avoid the cache and retry new XMLHttpRequest.

Comment 4

[Patrick McManus [:mcmanus]]

this makes sense to me. honza, what do you think?

Comment 5

[Honza Bambas (:mayhemer)]

RFC 2616:

- Cache-control: no-store: "If sent in a request, a cache MUST NOT store any part of either this request or any response to it." [1]

  => it says nothing about revalidation, we only must prevent persisting the entry (i.e. set it memory-only)


- Cache-Control: no-cache: "The request includes a 'no-cache' cache-control directive" leads to "End-to-end reload" (=load from the origin server) [2]

  => yes, we don't implement this part


[1] http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.1
[2] http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.4

Comment 6

[Binyamin]

Requested header Cache-Control: no-store does not avoid cache.

Comment 7

[Julian Reschke]

(In reply to Honza Bambas (:mayhemer) from comment #5)
> RFC 2616:
> ...

Note that you really ought to look at <http://greenbytes.de/tech/webdav/draft-ietf-httpbis-p6-cache-25.html#cache-request-directive> (but it seems the answer is the same)

Comment 8

[Binyamin]

The problem is - nothing supported from Cache-Control sent by the user agent.
For example Cache-Control: "no-cache", Cache-Control: "max-age=0", Cache-Control: "max-age=0, must-revalidate" must avoid cache, but does not on Firefox.

Cache-Control explained in http://stackoverflow.com/questions/1046966/whats-the-difference-between-cache-control-max-age-0-and-no-cache