Caching on a machine level - most likely not related to this module.

[sunnysideup]

We are experiencing some weird caching issues that, very likely, do NOT to relate to this module. I am still posting here just in case anyone else has experienced the same or in case the module does affect it in some weird way.

Here is how to recreate bug:

1. We create an "ADMIN only" page - visit it a few times (we can see in the headers that the page is NOT being cached) - i.e. press F5 ten times - and then we log out. All in Chrome.

2. We browse to the URL using Firefox (never visited the website before on firefox) and we can see the page (we are not logged in).

This obviously should not happen at all.

The same page is not accessible from other computers in our office. We are using a stock standard install of Kubuntu 16.04.

[tractorcow]

We are actually looking at this at silverstripe/silverstripe-framework#8086 (comment).

Our suggestion is that any session instantiation will result in cache control being set to private; That includes CSRF and user login.

[dhensby]

looks like this is solved in core, then?

Actually, I don't see how it can be related, because if FF browser has never been before but sees a cached page, then this sounds more like a duplicate of #70?

[sunnysideup]

We looked at this for ages and it definitely had some weird caching going on (perhaps ISP caching)?