Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

The X-Inertia cache trap: Cloudflare, Vary, and edge-cached HTML

I clicked the logo on one of my Laravel + Inertia sites and the homepage rendered inside Inertia's error modal — in production, on a 200 response. The cause: Inertia serves HTML and JSON under the same URL, my app had opted its pages into C…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I clicked the logo on one of my Laravel + Inertia sites and the homepage rendered inside Inertia's error modal — in production, on a 200 response. The cause: Inertia serves HTML and JSON under the same URL, my app had opted its pages into Cloudflare's edge cache with s-maxage, and Cloudflare ignores Vary: X-Inertia when deciding cache hits. The edge happily handed cached HTML to an XHR that expected a JSON page object.



The write-up walks through the live curl evidence (cf-cache-status: HIT for an X-Inertia: true request), why the no-store I already had on the JSON responses couldn't prevent it (store-time vs lookup-time defenses), the one-line fix, and the Cloudflare Cache Rule that lets you keep edge-cached HTML if you control your own zone. Plus a thirty-second curl test to check whether your own Inertia app is affected.






Originally published at andreasbergstrom.dev — read the full post there.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten The X-Inertia cache trap: Cloudflare, Vary, and edge-cached HTML

Thematisch verwandte Begriffe: XInertia, cache, trap, Cloudflare · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100746 | A vulnerability was found in coollabsio Coolify up to 4.1.0. This affec…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag