Skip to content

Latest commit

 

History

History
35 lines (25 loc) · 1.45 KB

README.md

File metadata and controls

35 lines (25 loc) · 1.45 KB

CVE-2024-26144-test

Requirement:

  • Docker compose
  • Deno
$ deno run --allow-run --allow-net check.ts

If you want to test CDN, please set the URL in argument.

(Make sure all caches are purged before run!)

$ deno run --allow-run --allow-net check.ts https://example.com/

Results

If HTTP response contains Set-Cookie header...

Web server Response cached (*1) Cache contains Set-Cookie
Nginx + proxy_cache NO -
Nginx + Passenger YES YES
Apache + mod_cache YES YES
HAProxy YES YES
Cloudflare (Free plan) NO -
CloudFront (CachingOptimized) YES NO
CloudFront (UseOriginCacheControlHeaders) NO -
Fastly NO -

*1 It is the result of whether the cache works for anonymous user. Even if it says NO, it may return cache for the request with same cookie.