Other nomination

AppCache's forgotten tales

Luan Herrera · 31 May 2021

A page's AppCache manifest NETWORK section acts as an allowlist that blocks any request not listed, including requests produced by redirects, and Chrome extended it with non-standard glob pattern matching.

Record

Researcher

Luan Herrera

Date

31 May 2021

In the archive

• Nominated for the 2021 Top 10 Web Hacking Techniques

Related sources

• Author proof of concept

Tags

• xsleak
• side-channel
• info-leak
• same-origin-policy
• cache
• service-worker
• javascript
• cve
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Luan Herrera, first published at the original source. Preserved copies are kept so the citation survives its host.