medium10 pts · first answer countshttp-cachingcdnweb-security
Users see each other’s profile
GET /api/me returns the logged-in user’s profile with Cache-Control: public, max-age=300. After putting a CDN in front, some users see someone else’s name. What is the fix?
Discussion 0
Join free to post in the discussion.
Related questions
- What HttpOnly doesFull Stack Developer
- What HTTPS protectsFull Stack Developer
- Caching a bank statement pageFull Stack Developer
- ETag and If-None-MatchFull Stack Developer
- User bios rendered as HTMLFull Stack Developer
- Module variable holds the current userFull Stack Developer
- JWT algorithm confusionFull Stack Developer
- Redirect check that can be bypassedFull Stack Developer