Hi all,
I have a problem that is driving me mad...At present an application that has always past a penetration test has come back with one medium priority issue. When you view a PDF online it is caching that PDF to the use's local Temp Files folder. When the user
logs out the PDF file is available to anyone who looks in the cache.
This is not an issue with Chrome or FF.
Now I have every potential header set to prevent caching and the PDF is generated/served by a handler that includes application logic to check that the user is logged in
BUT IE is still caching the file.
In IE 10 the handlers e.g. ServeDocument.ashx?... is cached and in IE 9 (and <) the PDF itself is cached.
Does anybody have a solution to prevent this from occuring or any advice. I have spent about a week trying to resolve this with no luck.
Thanks in advance.
/D
...
Go to the complete details ...