Re: Browser security problems - Safari

["Patrick, Stephen" <STEVE () BUMAIL BRADLEY EDU>]

The server no-caching directives are not honored by Safari.

 

===========================================

Stephen Patrick

Executive Director of Computing and Programming Services

-----Original Message-----
From: Jeni Li [mailto:jeni.li () ASU EDU] 
Sent: Monday, March 01, 2004 2:50 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Browser security problems - Safari

 

You mean on the client side, rather than using expires/no-caching
directives on the server side? If you want to do it using preferences,
you're out of luck. However, there are some workarounds, including
replacing or redirecting the cache folder and/or using a third-party
tool. Also, if you have enabled Safari's Debug menu, there *is* a
preference you can set in that menu to disable caching.

 

The folder workaround:

http://www.macosxhints.com/article.php?story=20030216085845456

 

The third-party tool (caveat emptor):

http://www.lordofthecows.com/safari_enhancer.php

 

How to enable the Debug menu:

http://www.macosxhints.com/article.php?story=20030110063041629

 

Hope this helps.

Jeni Li

Web/Unix Systems Administrator

Arizona State University East

        -----Original Message-----
        From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU]On Behalf Of Patrick, Stephen
        Sent: Monday, March 01, 2004 1:35 PM
        To: SECURITY () LISTSERV EDUCAUSE EDU
        Subject: [SECURITY] Browser security problems - Safari

        We provide extensive information and access to our systems using
web products.  

         

        We have a policy that we must certify browsers before we allow
them to be used to access our data.  Furthermore, we require that we can
"turn off" caching before we certify a browser.

         

        We have been unable to figure out a way to turn off caching in
Safari.  

         

        Has anyone run into this problem before?

         

        ===========================================

        Stephen Patrick

        Executive Director of Computing and Programming Services

         

        ********** Participation and subscription information for this
EDUCAUSE Discussion Group discussion list can be found at
http://www.educause.edu/cg/.

********** Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.