diff --git a/modules/consent/www/getconsent.php b/modules/consent/www/getconsent.php index 31e4faa490fa09df34e18518cad17c8c8c7cfc17..b075c6cb00dc9404e7e70e3afb47a5daf5899178 100644 --- a/modules/consent/www/getconsent.php +++ b/modules/consent/www/getconsent.php @@ -8,6 +8,16 @@ * @version $Id$ */ +/* + * Explisit instruct consent page to send no-cache header to browsers + * to make sure user attribute information is not store on client disk. + * + * In an vanilla apache-php installation is the php variables set to: + * session.cache_limiter = nocache + * so this is just to make sure. + */ +session_cache_limiter('nocache'); + SimpleSAML_Logger::info('Consent - getconsent: Accessing consent interface'); if (!array_key_exists('StateId', $_REQUEST)) { @@ -133,8 +143,6 @@ if (array_key_exists('consent:store', $state)) { $t->data['usestorage'] = FALSE; } - - $t->show(); exit; diff --git a/www/example-simple/saml2-example.php b/www/example-simple/saml2-example.php index e1cf0f0fc9e20036f6f79c0fad88f026f3477724..737888cc2ef9c61da8ad5d1b4d6006af9fe33817 100644 --- a/www/example-simple/saml2-example.php +++ b/www/example-simple/saml2-example.php @@ -6,6 +6,17 @@ */ require_once('../_include.php'); +/* + * Explisit instruct consent page to send no-cache header to browsers + * to make sure user attribute information is not store on client disk. + * + * In an vanilla apache-php installation is the php variables set to: + * session.cache_limiter = nocache + * so this is just to make sure. + */ +session_cache_limiter('nocache'); + + /* Load simpleSAMLphp, configuration and metadata */ $config = SimpleSAML_Configuration::getInstance(); $session = SimpleSAML_Session::getInstance();