Khahlisa ukubhalwa kabusha kokugcwalisa kwe-proxy nge-no-transform ne-HTTPS

I-proxy eshintsha okugcwalisa ingashintsha impendulo endleleni eya esipheqululini: ukucindezela kabusha isithombe, ukubhala kabusha i-markup noma ukufaka i-JavaScript esekayo. Ikhasi elisebenza kunethiwekhi eyodwa bese lithola i-markup engaziwa kwelinye lingase lihlangabezane nalo kuziphatha kwalowo ophakathi.

Ngokwesayithi oyilawulayo, i-HTTP inikeza umyalelo ocacile wempendulo:

Cache-Control: no-transform

I-RFC 9111 idinga ukuthi umuntu ophakathi othola lo myalelo wempendulo ashiye okugcwalisa kungashintshiwe, kungakhathaliseki ukuthi lowo ophakathi usebenzisa i-cache noma cha. Lokhu kuhlobene nokucindezelwa kabusha kwezithombe nokufakwa kwe-markup, hhayi kuphela ukuthi into igcinwa yini.

Kugcine kanye nenqubomgomo ye-cache ekhona

Uma impendulo isivele inemiyalelo ye-cache, engeza isidingo ngamabomu esikhundleni sokulahla ingxenye esele yenqubomgomo. Isibonelo, impahla egcinwa emphakathini ingaba nakhu:

Cache-Control: public, max-age=3600, no-transform

Lesi sibonelo sigcina inqubomgomo yokusha yehora elilodwa kuyilapho senqabela ukuguqulwa kokugcwalisa. I-no-transform ayisho i-no-store futhi ayivimbi ukucutshungulwa kokudluliswa okuvamile. Ku setha kuzimpendulo okubalulekile kuzo okugcwalisa kwangempela, kuhlanganise nezingimpendulo zezithombe ezihlukene lapho kufanele khona.

Umyalelo usebenza ngokuhlonipha kwalowo ophakathi. Awuvimbeli ngokwe-cryptography ukuthi idivayisi yenethiwekhi ingawunaki umyalelo.

Vikela nokuthuthwa

I-HTTPS inikeza isiphequluli ukuxhumana okunokuqinisekiswa nokuvikelwa kobuqotho kumlingani wayo we-TLS. I-proxy ejwayelekile yenkampani ehambisa ithrafikhi ebethelwe ayikwazi ukufaka ngokuthula i-script kulokho kuxhumana okuvikelwe. Gcina ukuqinisekiswa kwesitifiketi kusebenza; i-proxy yokuhlola ethembekile yasendaweni ephetha i-TLS iyisakhiwo esihlukile.

Hlinzeka ngekhasi nezinsiza zalo ezincikile nge-HTTPS. Qondisa izivakashi ze-HTTP ku-HTTPS, futhi cabanga nge-HSTS ekusetshenzisweni okungayisekela ngokungaguquki. Ukuqondisa kuphela kuqala ngokushintshana kwe-HTTP okungavikelekile kusivakashi esisebenzise i-URL ye-HTTP; inqubomgomo ye-HSTS efundwe ngaphambili noma elayishwe kusengaphambili ishintsha lokho kukhetha kokuqala.

Ukuvimba i-script efakiwe kungase kunciphise imiphumela ebonakalayo, kodwa impendulo ingase ibe ne-HTML eshintshiwe noma ama-URL ezithombe abhalwe kabusha. Ukushintsha igama elilodwa lomsebenzi elidala, ukwengeza umbono ongajwayelekile noma ukwenza imephu yekheli lokufaka lomlando akusimisi ubuqotho bokugcwalisa komunye ophakathi.

Lapho uphenya umbiko, qhathanisa impendulo etholiwe nokugcwalisa okuhlosiwe komthombo futhi ukhombe lapho i-TLS iphela khona. Lobu bufakazi buwusizo kakhulu kunokuthatha yonke i-script engaziwa njengephutha kukhodi yohlelo lwesayithi uqobo.