Merge pull request #1797 from 18F/et-pentest-finding2

Added NoCacheMiddleware
18F · Sep 20, 2024 · 2f8010f · 2f8010f
2 parents f4750d2 + 5149a81
commit 2f8010f
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/tock/tock/middleware.py b/tock/tock/middleware.py
@@ -1,6 +1,7 @@
 from datetime import datetime, timedelta
 from django.conf import settings
 from django.contrib import auth
+from django.utils.cache import add_never_cache_headers
 
 
 class AutoLogout(object):
@@ -34,3 +35,13 @@ def __call__(self, request):
             datetime.now().strftime(fmt)
 
         return self.get_response(request)
+
+
+class NoCacheMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        add_never_cache_headers(response)
+        return response
diff --git a/tock/tock/settings/base.py b/tock/tock/settings/base.py
@@ -80,6 +80,7 @@
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'tock.middleware.AutoLogout',
+    'tock.middleware.NoCacheMiddleware'
 ]
 
 AUTHENTICATION_BACKENDS = (