Even though I send \"cache-control: must-revalidate\" Google Chrome uses a locally cached page when using the back and forth button in the browser.
This is part of t
When using the back and forward buttons, the key Cache-Control directive to prevent the browser returning a cached copy of the page is no-store.
Nothing else will help, and nothing else is needed. Your Cache-Control header can simply be:
Cache-Control: no-store
There are two exceptions to this though.
Finally, I should note that using this directive is not advisable in general, since it obviously has a significant impact on bandwidth usage. The browser can't even take advantage of Etags to get a 304 Not Modified response, because it will have no stored copy to use in the event a 304 response is received.