From 4379e9fb89d27f8c2a15465844b30bed2b55c07c Mon Sep 17 00:00:00 2001 From: Sajeyks Date: Wed, 30 Sep 2026 15:52:54 +0300 Subject: [PATCH] Disable caching and report the chosen site in dev responses Adds Cache-Control: no-store and an X-Dev-Site header to the dev site switcher so a browser cannot reuse another site's page or redirect, and the selected site is visible in dev tools. --- utils/middleware.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/utils/middleware.py b/utils/middleware.py index da180c5a..fd6a5851 100644 --- a/utils/middleware.py +++ b/utils/middleware.py @@ -73,9 +73,13 @@ class DevSiteSwitcherMiddleware(object): request.META.pop('HTTP_X_FORWARDED_HOST', None) def process_response(self, request, response): + site = request.META.get('DEV_SITE_SWITCH', '') + # dev only: never let a browser reuse a page or redirect from another + # site, and show which site the server picked (see browser dev tools) + response['Cache-Control'] = 'no-store' + response['X-Dev-Site'] = site or '(default)' if 'site' not in request.GET: return response - site = request.META.get('DEV_SITE_SWITCH', '') if site: response.set_cookie(self.COOKIE, site) location = response.get('Location', '')