40039—Web Cache Deception

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 40039
Risk:: Medium
Type:: Active

摘要

Web cache deception may be possible. It may be possible for unauthorised user to view sensitive data on this page.

解决方案

It is strongly advised to refrain from classifying file types, such as images or stylesheets solely by their URL and file extension. Instead you should make sure that files are cached based on their Content-Type header.

参考

browse all alerts