Top 10 winner

Cross-Site Leaks

[🌐💧💥] HTTP Cache Cross-Site Leaks

@sirdarckcat · sirdarckcat.blogspot.com

The browser HTTP cache answers cross-site questions: evict a resource with a POST or an overlong Referer, make the victim load a target page, then re-probe to see whether it got cached. That reveals whether the page requested a given resource, leaking group membership, search hits and other private state; partitioned caches and SameSite cookies mitigate it.

Record

Document

[🌐💧💥] HTTP Cache Cross-Site Leaks

Researcher

@sirdarckcat

Published by

sirdarckcat.blogspot.com

Topic

Other

In the archive

• Ranked #2 in the 2019 Top 10 Web Hacking Techniques

Related sources

• Cache-referrer demonstration

Tags

• xsleak
• cache
• side-channel
• info-leak
• same-origin-policy
• cookie
• http
• mitigation
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of @sirdarckcat, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.