Understanding Our Cache and the Web Cache Deception Attack

What this post added

This post details the Web Cache Deception attack and Cloudflare's two-phase caching logic (eligibility and disqualification) to defend against it. It outlines specific rules for cache eligibility based on request characteristics (file extensions, query strings, cookies) and disqualification based on response headers (Cache-Control, Expires, Set-Cookie). It also provides figures detailing 'Always Cacheable' and 'Sometimes Cacheable' file extensions.