Preventing Sensitive Sites from Showing in Tiles
As a web application developer, is there a way to prevent my app's site from showing up as a tile in the New Tab view, without any Firefox configuration changes or end-user intervention? For example, is there some way to serve the page (e.g., with particular headers) that will prevent it from appearing as a tile?
My use case is a private corporate web app that serves highly confidential images, and those images and pages containing them should never appear in the New Tab view of any user that uses the app. It is not possible to rely on Firefox settings changes to accomplish this, because there are users whose browser I have no control over.
I've seen the other questions about how end-users can affect tiles, and none of those are relevant, since I need a way that doesn't require end user intervention. I also searched bugzilla and didn't see any tickets there discussing this issue, and I wasn't able to find any webapp-developer-focused documentation about tiles.
All Replies (2)
hi, as per bug 754608 you might want to use Cache-Control: no-store to avoid thumbnails being created.
Thanks for the response. That kind of works, and it's good enough for my needs.
What I found is that having "Cache-Control: no-store,no-cache" on the image itself does not prevent the image being visible in the tile, but having "Cache-Control: no-store", as you suggest, on the entire page sort of works: FF will still create a tile for the site in that case, but the tile will have no content. It'll just have a tile with the title underneath, but the tile image is blank.
Adding 'no-store' for the page itself does not affect tiles for sites that have already been visited and have a tile though.