From 2ab29a0014345ca659bcda7231b3bb1a10fe6354 Mon Sep 17 00:00:00 2001
From: Daniel Winzen <d@winzen4.de>
Date: Wed, 17 Aug 2016 14:50:31 +0200
Subject: [PATCH] Prevent browser from caching at all.

---
 CHANGELOG | 1 +
 chat.php  | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index f749160..3fa1678 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,6 +5,7 @@ Prevent posting the same message twice, if no other message was posted in-betwee
 Instruct browser not to send referrer.
 Enable image embedding without cookies as there is no more risk of session leakage.
 Allow configuring password and nickname regex
+Prevent browser from caching at all.
 
 Version 1.20.6 - Jul. 23, 2016
 Simplify ignore logic + disallow ignoring chatters with higher status
diff --git a/chat.php b/chat.php
index e9af79b..0eca04e 100644
--- a/chat.php
+++ b/chat.php
@@ -3087,7 +3087,7 @@ function sort_names(&$names){
 function send_headers(){
 	header('Content-Type: text/html; charset=UTF-8');
 	header('Pragma: no-cache');
-	header('Cache-Control: no-cache');
+	header('Cache-Control: no-cache, no-store, must-revalidate, max-age=0');
 	header('Expires: 0');
 	header('Referrer-Policy: no-referrer');
 	header('Content-Security-Policy: referrer never');
@@ -3688,7 +3688,7 @@ function load_html(){
 	global $H, $I, $language;
 	$H=array(// default HTML
 		'form'		=>"form action=\"$_SERVER[SCRIPT_NAME]\" method=\"post\"",
-		'meta_html'	=>'<meta name="robots" content="noindex,nofollow"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="Pragma" content="no-cache"><meta http-equiv="Cache-Control" content="no-cache"><meta http-equiv="expires" content="0"><meta name="referrer" content="no-referrer">',
+		'meta_html'	=>'<meta name="robots" content="noindex,nofollow"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="Pragma" content="no-cache"><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate, max-age=0"><meta http-equiv="expires" content="0"><meta name="referrer" content="no-referrer">',
 		'credit'	=>'<small><br><br><a target="_blank" href="https://github.com/DanWin/le-chat-php">LE CHAT-PHP - ' . VERSION . '</a></small>',
 		'commonform'	=>hidden('lang', $language).hidden('nc', substr(time(), -6))
 	);