symposion_app Files · pinaxcon/disable_cscache.py

Files @ 3ffa5fab60de

Branch filter:

Location: symposion_app/pinaxcon/disable_cscache.py

3ffa5fab60de 224 B text/x-python Show Annotation Show as Raw Download as Raw

James Polley

Don't require login to view qrcode

* The qrcode contains no information that isn't in the URL you used to
access the code, so information is being leaked
* Allowing unauthenicated access lets people see the image in their
mail client

Not ideal. Let's revert this later and think of something better next
year - perhaps spending some more time researching best practices on
images in email..

from django.utils.cache import add_never_cache_headers


class DisableClientSideCachingMiddleware(object):
    def process_response(self, request, response):
        add_never_cache_headers(response)
        return response