diff options
author | nachoparker <nacho@ownyourbits.com> | 2018-04-05 03:27:33 +0300 |
---|---|---|
committer | nachoparker <nacho@ownyourbits.com> | 2018-04-05 03:27:53 +0300 |
commit | 7eecd81dd375a658dff1d2ea60fff714fe65678e (patch) | |
tree | 4d6dc970763387a8cb45358a5eb1996b9049cd29 /ncp-web | |
parent | eece4d08c921f074c97102af6f8e0907e1f866c0 (diff) |
ncp-web: force reload CSRF tokens every timev0.53.23
Diffstat (limited to 'ncp-web')
-rw-r--r-- | ncp-web/index.php | 3 | ||||
-rw-r--r-- | ncp-web/ncp.js | 2 |
2 files changed, 3 insertions, 2 deletions
diff --git a/ncp-web/index.php b/ncp-web/index.php index 814420c6..f06aa1f3 100644 --- a/ncp-web/index.php +++ b/ncp-web/index.php @@ -36,7 +36,8 @@ header("X-Robots-Tag: none"); header("X-Permitted-Cross-Domain-Policies: none"); header("X-Frame-Options: DENY"); - header("Cache-Control: max-age=15778463"); + header("Cache-Control: no-cache"); + header('Pragma: no-cache'); ini_set('session.cookie_httponly', 1); if (isset($_SERVER['HTTPS'])) ini_set('session.cookie_secure', 1); diff --git a/ncp-web/ncp.js b/ncp-web/ncp.js index cac619b4..81820f0e 100644 --- a/ncp-web/ncp.js +++ b/ncp-web/ncp.js @@ -344,7 +344,7 @@ $(function() { var ret = $.parseJSON( result ); if ( ret.token ) - $('#csrf-token').set( { value: ret.token } ); + $('#csrf-token-dash').set( { value: ret.token } ); $('#loading-info-gif').hide(); $('#dashboard-table').ht( ret.table ); $('#dashboard-suggestions').ht( ret.suggestions ); |