set no-cache headers in the response

1 files changed, 10 insertions, 0 deletions

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 62d9df2..65d4861 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,5 +1,6 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
+  before_filter :no_cache_header
 
   ActiveSupport.run_load_hooks(:application_controller, self)
 
@@ -15,4 +16,13 @@ class ApplicationController < ActionController::Base
   end
   helper_method :bold
 
+  #
+  # we want to prevent the browser from caching anything, just to be safe.
+  #
+  def no_cache_header
+    response.headers["Cache-Control"] = "no-cache, no-store, must-revalidate"
+    response.headers["Pragma"] = "no-cache"
+    response.headers["Expires"] = "0"
+  end
+
 end