From 5c6cb6d68baaff0d8596a6a3a5406e5510e75def Mon Sep 17 00:00:00 2001
From: Nicolas Wavrant <nicolas.wavrant@nexedi.com>
Date: Thu, 15 Dec 2016 16:31:31 +0100
Subject: [PATCH] slaprunner: webrunner's webdav explicetly tells to user to
 not cache on different domain or user

---
 software/slaprunner/common.cfg    | 2 +-
 software/slaprunner/httpd_conf.in | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/software/slaprunner/common.cfg b/software/slaprunner/common.cfg
index d9ab508a8e..68e129c8f4 100644
--- a/software/slaprunner/common.cfg
+++ b/software/slaprunner/common.cfg
@@ -125,7 +125,7 @@ recipe = hexagonit.recipe.download
 ignore-existing = true
 url = ${:_profile_base_location_}/httpd_conf.in
 download-only = true
-md5sum = 112cf8ada9e5c4172fa6fc464df0fd3a
+md5sum = 40825ef2d259ae3b86dfd2f28f597d3a
 filename = httpd_conf.in
 mode = 0644
 
diff --git a/software/slaprunner/httpd_conf.in b/software/slaprunner/httpd_conf.in
index 4fdbbc817c..8af13b1f61 100644
--- a/software/slaprunner/httpd_conf.in
+++ b/software/slaprunner/httpd_conf.in
@@ -85,6 +85,12 @@ Alias /share {{ parameters.runner_home }}
     AuthType Basic
     AuthName "Webrunner Dav"
     AuthUserFile "{{ parameters.htpasswd_file }}"
+
+    # Prevent using the web browser cache if requesting  the same document
+    # from different domains or with different users
+    Header set Cache-Control "private, max-age=0, must-revalidate"
+    Header set Vary "Origin,Cookie,Authorization"
+
     <LimitExcept OPTIONS>
         Require valid-user
     </LimitExcept>
-- 
2.25.1