Uploaded image for project: 'Ibexa IBX'
  1. Ibexa IBX
  2. IBX-2350

HTTP Cache Poisoning in page builder

    XMLWordPrintable

Details

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 2.5.30, 3.3.20, 4.0.7, 4.1.4
    • 2.5.29, 3.3.18, 4.0.5, 4.1.2
    • Experience
    • System with varnish or fastly as HTTP-CACHE

    Description

      When viewing an a content object containing a `ezlandingpage` field type, each block is supposed to be rendered using a separate ESI.

      However, I noticed that if hitting ctrl+F5 on such page ( and the page is not already in the http cache), the page will be rendered without ESIs. Instead, content of each block is rendered inline (subrequests).
      When using ctrl+F5, the browser ( at least FireFox) adds a Pragma: no-cache header in the request.

      In PageBuilder, there is an error causing all blocks to be rendered inline instead of as esi if clients requests a non-cached version of the resource

      The check $request->isNoCache() should be removed ! Clients should not be able to decide if we are going use ESIs or not.

      Once the request has been rendered inline, that version will be stored in the HTTP-CACHE and served to other clients

      Designs

        Attachments

          Activity

            People

              Unassigned Unassigned
              vidar.langseid@ibexa.co Vidar Langseid
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: