Sensitive Cache Scanner
Detects responses with a session cookie marked cacheable that a shared CDN could serve to another user.
What it checks
This scanner reviews your site's responses that carry a session cookie and checks whether they are marked as cacheable. It detects when a personalized or session-bound page could be stored in a shared cache such as a CDN or an intermediate proxy.
Why it matters
If a response tied to one user's session gets stored in a shared cache, that cache can end up serving it to a completely different person. That means one visitor could see another user's account, data or session, which is a serious information leak.
How to fix it
Make sure any response containing session data carries headers that prevent caching, such as Cache-Control with private and no-store. Review your CDN or proxy settings so it never stores pages associated with a session cookie.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free