Collected research

AppCache's forgotten tales

Luan Herrera · blog.lbherrera.me · 31 May 2021

A page's AppCache manifest NETWORK section acts as an allowlist that blocks any request not listed, including requests produced by redirects, and Chrome extended it with non-standard glob pattern matching.

Record

Researcher

Luan Herrera

Published by

blog.lbherrera.me

Date

31 May 2021

Topic

Other

In the archive

• Collected in the 2021 research round

Related sources

• Author proof of concept

Tags

• xsleak
• side-channel
• info-leak
• same-origin-policy
• cache
• service-worker
• javascript
• cve
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Luan Herrera, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.