Possible issue with Firefox 12 (and onwards?)

[neilc]

Hi

This is kind of a "for info"/warning - not a problem with mantis, it works great!

Background:
I've hacked mantis a bit to link its authentication with that of another system. I've put some custom code in authentication_api.php auth_ensure_user_authenticated() which header redirects to a page outside of mantis if the user needs to log in.

Potential issue:
In Firefox 12, the caching seems to be more agressive and this includes caching header redirects. This causes a problem with my custom code since the 'cache-control' seems to be set to 'private' (rather than 'no-cache') due to the

Code: Select all

session_cache_limiter( 'private_no_expire' );

line in the MantisPHPSession constructor in session_api.php. It looks like for a 'clean' mantis, that other header() calls set 'cache-control' to 'no-cache' so the issue does not arise. This caching issue causes subsequent requests through FF12 to a particular mantis page to continually wrongly request the page I originally redirected to.

I thought I'd mention it in case this is useful for someone since I'm not really sure why this line isn't just:

Code: Select all

session_cache_limiter( 'nocache' );

Also, caching issues are always frustrating to debug so hopefully this helps if you do see this issue in future.

Cheers
---
Neil