4 ms·
ETags can be arbitrary, the server can put whatever it wants.
by litewulf 18y ago
ETags can be arbitrary, the server can put whatever it wants.
- jbert 18y agoAh, yes. An attacker could fetch the resource themselves, discover the ETag and serve their malicious resource with the real ETag. Sorry.