Automattic / Automattic/wp-super-cache
Secret TAG Dynamic Cache visible on uncached first load.
- Dominant language
- PHP
- Stars
- 436
- Forks
- 130
- Avg merge
- 15h 11m
- Merged PRs (30d)
- 10
Description
As Dravon5X said on thread from December 2017, "after cache deletion, first visitor will see secret tag. Only 2nd and next visitors will see correct replacement of Secret TAG."
Enable dynamic caching is on.
Late Init is on.
First load thus shows secret tag and is a security issue.
Please check : https://github.com/Automattic/wp-super-cache/issues/490
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading the linked issue #490 and reproducing the first uncached load with Enable dynamic caching and Late Init enabled. Done means the first visitor after cache deletion never sees the secret tag and receives the correct replacement instead.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend, performance, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100