Mark is_draft things as no cache by Cloudflare

Refs #488

blog/tests.py

@@ -196,6 +196,10 @@ def test_draft_items_not_displayed(self):
             response2 = self.client.get(obj.get_absolute_url())
             self.assertContains(response2, robots_fragment)
             self.assertContains(response2, draft_warning_fragment)
+            assert (
+                response2.headers["cache-control"]
+                == "private, no-cache, no-store, must-revalidate"
+            )
 
             # Publish it
             obj.is_draft = False
@@ -204,6 +208,7 @@ def test_draft_items_not_displayed(self):
             response3 = self.client.get(obj.get_absolute_url())
             self.assertNotContains(response3, robots_fragment)
             self.assertNotContains(response3, draft_warning_fragment)
+            assert "cache-control" not in response3.headers
 
         counts2 = json.loads(self.client.get("/tags-autocomplete/?q=testing").content)
         assert counts2 == {

blog/views.py

@@ -48,6 +48,13 @@
 BLACKLISTED_TAGS = ("quora", "flash", "resolved", "recovered")
 
 
+def set_no_cache(response):
+    response["Cache-Control"] = "private, no-cache, no-store, must-revalidate"
+    response["Pragma"] = "no-cache"
+    response["Expires"] = "0"
+    return response
+
+
 def archive_item(request, year, month, day, slug):
     if day.startswith("0"):
         day = day.lstrip("0")
@@ -86,7 +93,7 @@ def archive_item(request, year, month, day, slug):
             content_type
         )
 
-        return render(
+        response = render(
             request,
             template,
             {
@@ -101,6 +108,9 @@ def archive_item(request, year, month, day, slug):
                 "is_draft": obj.is_draft,
             },
         )
+        if obj.is_draft:
+            set_no_cache(response)
+        return response
 
     # If we get here, non of the views matched
     raise Http404