plone/plone.app.toolbar — comment on commit 30d6e4d4b34217e63f8fcb2624e24e254430b28d
File:  line 0
By lrowe:

I'm a little worried about this code, as it allows any visitor making a request to potentially poison an http cache by setting a request header in their browser. What's the intent behind it?