{"push_id":1478508592,"size":5,"distinct_size":5,"ref":"refs/heads/master","head":"3141bf604bce64b686586fdd2d944379de34852f","before":"ad717d4f5df4977522507805816177540ffac384","commits":[{"sha":"73fe6bd57827c73604de7530639e02ef8010031b","author":{"name":"Mark Walters","email":"49177859225b0a97d882403484cd7a713a454de5@gmail.com"},"message":"util: add a protected route wrapper\n\nThis adds a wrapper for responses which should not be cached. It\nrenders the response, and sets the Cache-Control header to\n\"no-cache, no-store, must-revalidate, max-age=0\"\n\nThis should stop the browser from caching the response, at least to\ndisk. Firefox seems to think caching in memory is OK, but it does stop\nthe back button working to bring back the page after you logout.\n\nSigned-off-by: Mark Walters <markwalters1009@gmail.com>\nTested-by: Mark Walters <markwalters1009@gmail.com>\n[rlb@defaultvalue.org: adjust indentation; remove vestigal function]\nSigned-off-by: Rob Browning <rlb@defaultvalue.org>\nReviewed-by: Rob Browning <rlb@defaultvalue.org>\nTested-by: Rob Browning <rlb@defaultvalue.org>","distinct":true,"url":"https://api.github.com/repos/rlbdv/noservice/commits/73fe6bd57827c73604de7530639e02ef8010031b"},{"sha":"9c111f1aa1555a0afe802e65d8d03217a4f8b9e2","author":{"name":"Mark Walters","email":"49177859225b0a97d882403484cd7a713a454de5@gmail.com"},"message":"show: switch def-restricted-routes to restricted\n\nThis switches show.clj to use route/restricted rather than the\nabbreviated def-restricted-routes form. This matches all the other\nroutes, and makes the change to no-cache cleaner.\n\nSigned-off-by: Mark Walters <markwalters1009@gmail.com>\nTested-by: Mark Walters <markwalters1009@gmail.com>\n[rlb@defaultvalue.org: shorten commit summary]\nReviewed-by: Rob Browning <rlb@defaultvalue.org>\nTested-by: Rob Browning <rlb@defaultvalue.org>","distinct":true,"url":"https://api.github.com/repos/rlbdv/noservice/commits/9c111f1aa1555a0afe802e65d8d03217a4f8b9e2"},{"sha":"37f6c404e3ab3587e853ef983833f947b2fa6398","author":{"name":"Mark Walters","email":"49177859225b0a97d882403484cd7a713a454de5@gmail.com"},"message":"Make most routes protected\n\nPreviously all the routes were cacheable. In particular, this meant\nthat confidential emails and search results could be cached to disk,\nand that the back button could be used to view the email session even\nafter logout.\n\nThis uses the new protected route wrapper to prevent both of these. We\napply to all routes that could contain confidential data.\n\nThat is all the main restricted routes except:\n\n- non-existent routes ('*' in app-routes in handler.clj)\n- the GET send-email which just redirects to GET compose (which is not cacheable)\n\nSigned-off-by: Mark Walters <markwalters1009@gmail.com>\nTested-by: Mark Walters <markwalters1009@gmail.com>\n[rlb@defaultvalue.org: adjust commit summary; wrap make-compose-routes]\nReviewed-by: Rob Browning <rlb@defaultvalue.org>\nTested-by: Rob Browning <rlb@defaultvalue.org>","distinct":true,"url":"https://api.github.com/repos/rlbdv/noservice/commits/37f6c404e3ab3587e853ef983833f947b2fa6398"},{"sha":"82faf7ee650eba0f2f57af1f1332a8fd8177d155","author":{"name":"Rob Browning","email":"c403b638903a9393423ebcfb0426dd14658303aa@defaultvalue.org"},"message":"Remove vestigial restricted refers\n\nSigned-off-by: Rob Browning <rlb@defaultvalue.org>\nTested-by: Rob Browning <rlb@defaultvalue.org>","distinct":true,"url":"https://api.github.com/repos/rlbdv/noservice/commits/82faf7ee650eba0f2f57af1f1332a8fd8177d155"},{"sha":"3141bf604bce64b686586fdd2d944379de34852f","author":{"name":"Rob Browning","email":"c403b638903a9393423ebcfb0426dd14658303aa@defaultvalue.org"},"message":"Merge page caching protection","distinct":true,"url":"https://api.github.com/repos/rlbdv/noservice/commits/3141bf604bce64b686586fdd2d944379de34852f"}]}
{"actor":{"display_login":"rlbdv"}}