maxcountryman / flask-seasurf

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).
http://readthedocs.org/docs/flask-seasurf/
Other
190 stars 49 forks source link

Safari Caching Issues #95

Closed marban closed 4 years ago

marban commented 4 years ago

No matter whether you're working with include or exclude settings, Seasurf always adds "Cookie" to response.vary (=Vary: Accept-Encoding, Cookie) which apparently makes Safari ignore any kind of Caching headers. I.e., the static folder in Flask will never be cached on the client.