Automattic / Automattic/wp-super-cache

Secret TAG Dynamic Cache visible on uncached first load.

Open
#878 0 comments 0 reactions 0 assignees View on GitHub
[Plugin] Super Cache enhancement
Dominant language
PHP
Stars
436
Forks
130
Avg merge
15h 11m
Merged PRs (30d)
10

Description

As Dravon5X said on thread from December 2017, "after cache deletion, first visitor will see secret tag. Only 2nd and next visitors will see correct replacement of Secret TAG."

Enable dynamic caching is on.
Late Init is on.
First load thus shows secret tag and is a security issue.

Please check : https://github.com/Automattic/wp-super-cache/issues/490

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the linked issue #490 and reproducing the first uncached load with Enable dynamic caching and Late Init enabled. Done means the first visitor after cache deletion never sees the secret tag and receives the correct replacement instead.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
backend, performance, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.