Browser & Web Performance · Senior · Question 34 of 75

What is web cache poisoning?

1Injecting cookies into the HTTP cache
2Filling the browser cache so it evicts important data
✓Correct answer: An attacker makes a shared cache store a harmful response, often via an unkeyed header the app reflects, which is then served to others

Explanation

For example, the app builds URLs from X-Forwarded-Host but the CDN doesn't include that header in the cache key.

Further reading

Test yourself

Take the Browser & Web Performance · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.