Disabling caching for sensitive web pages (aka how to prevent logged out users going ‘back’)
We all see web pages like Internet banking, HR systems, email, and more that allow you to log in, do something and load pages, log out, and then prevent you from using your browser’s history to see that sensitive information. I’m amazed that in my searches I couldn’t quickly find a definitive source of information on how to achieve this. Pages across the web in a search for ‘stop caching’ range from blog posts, to forum posts, to other pages, and people asking the question (try it: here, or maybe here).
Maybe I got unlucky, but finding …