Play
ReferenceIncidents
Era 3 · Series A

Cached page leak

The CDN cached a logged-in page under a key that left out the cookie, and served one user’s page to another.

What happens#

The CDN cached a logged-in page under a key that left out the cookie, and served one user’s page to another.

How to prevent it#

A cache key that holds the cookie, so a personal page is never shared.

Components it hits#

CDN