Merge pull request 'Prevent some browsers from caching servers basic auth request' (#159) from louis77/snac2:master into master

Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/159

1 files changed, 1 insertions, 0 deletions

diff --git a/httpd.c b/httpd.c
index 51ed1a2..e402e61 100644
--- a/httpd.c
+++ b/httpd.c
@@ -388,6 +388,7 @@ void httpd_connection(FILE *f)
                                 body, xs_dict_get(srv_config, "host"));
 
         headers = xs_dict_append(headers, "WWW-Authenticate", www_auth);
+        headers = xs_dict_append(headers, "Cache-Control", "no-cache, must-revalidate, max-age=0");
     }
 
     if (ctype == NULL)