change Cache-Control header to no-store, no-cache, must-revalidate

h1-702-2018 · May 4, 2018 · b8698d0 · b8698d0
1 parent 9be95fb
commit b8698d0
Show file tree

Hide file tree

Showing 20 changed files with 36 additions and 72 deletions.
diff --git a/custom-200/index.php b/custom-200/index.php
@@ -4,7 +4,6 @@
 header("HTTP/1.1 200 OK");
 header("Content-Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-cache");
-header("Cache-Control: no-store");
+header("Cache-Control: no-store, no-cache, must-revalidate");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/custom-201/index.php b/custom-201/index.php
@@ -4,7 +4,6 @@
 header("HTTP/1.1 201 Created");
 header("Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-cache");
-header("Cache-Control: no-store");
+header("Cache-Control: no-store, no-cache, must-revalidate");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/custom-30x/index.php b/custom-30x/index.php
@@ -4,7 +4,6 @@
 header("HTTP/1.1 ".$_GET["code"]." Found");
 header("Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-cache");
-header("Cache-Control: no-store");
+header("Cache-Control: no-store, no-cache, must-revalidate");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/htaccess/csv-with-body-md/.htaccess b/htaccess/csv-with-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).c.csv$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/csv
 Header always set Content-Type text/csv
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-with-body/.htaccess b/htaccess/csv-with-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).c.csv$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/csv
 Header always set Content-Type text/csv
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-without-body-md/.htaccess b/htaccess/csv-without-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).c.csv$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-without-body/.htaccess b/htaccess/csv-without-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).c.csv$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-with-body-md/.htaccess b/htaccess/img-with-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).i.jpg$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header image/jpeg
 Header always set Content-Type image/jpeg
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-with-body/.htaccess b/htaccess/img-with-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).i.jpg$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header image/jpeg
 Header always set Content-Type image/jpeg
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-without-body-md/.htaccess b/htaccess/img-without-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).i.jpg$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-without-body/.htaccess b/htaccess/img-without-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).i.jpg$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-with-body-md/.htaccess b/htaccess/json-with-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).j.json$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header application/json
 Header always set Content-Type application/json
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-with-body/.htaccess b/htaccess/json-with-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).j.json$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header application/json
 Header always set Content-Type application/json
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-without-body-md/.htaccess b/htaccess/json-without-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).j.json$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-without-body/.htaccess b/htaccess/json-without-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).j.json$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-with-body-md/.htaccess b/htaccess/xml-with-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).x.xml$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/xml
 Header always set Content-Type text/xml
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-with-body/.htaccess b/htaccess/xml-with-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).x.xml$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/xml
 Header always set Content-Type text/xml
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-without-body-md/.htaccess b/htaccess/xml-without-body-md/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).x.xml$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-without-body/.htaccess b/htaccess/xml-without-body/.htaccess
@@ -58,9 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).x.xml$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache
-Header always set Cache-Control no-cache
-# Always set Cache-Control to no-store
-Header always set Cache-Control no-store
+# Always set Cache-Control to no-cache no-store must-revalidate
+Header always set Cache-Control "no-store, no-cache, must-revalidate"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/iframe/index.php b/iframe/index.php
@@ -1,8 +1,7 @@
 <?php
 #http://ssrf.localdomain.pw/iframe/?proto=http&ip=127.0.0.1&port=80&url=/
 header("Content-Type: text/html");
-header("Cache-Control: no-cache");
-header("Cache-Control: no-store");
+header("Cache-Control: no-store, no-cache, must-revalidate");
 header("Pragma: no-cache");
 
 echo '<html><body>';