Two-step verification setup page was cached at cloudflare level on standard content page #794
Comments
|
Assuming this page should be cached, you can add a page specific option conditionally, to disable caching of the page when displaying a login page. For example: {% if isLoginPage %}
{% do craft.blitz.options.cachingEnabled(false) %}
{% endif %}See https://putyourlightson.com/plugins/blitz#page-specific-options |
bencroker
added
question
|
Thanks for getting back, though this page was not a login page. Craft returned a completely different HTML document to what was expected in this scenario. |
|
In that case, you probably want to force Craft to redirect to a login page, rather than show one at |
|
There is not a public login page on this entire website. |
|
In that case, I don’t know what to recommend. This appears to be a Craft issue. |
|
Ok no worries, I thought maybe blitz could detect if a request was to a backend page (if this is technically classed as one) I'm not sure. I'll make an issue on their repo. |
|
Blitz never caches CP pages, so this must be considered a “site” page. |
|
sure, it's hijacked the html which should render in this case, I've opened a new issue here craftcms/cms#17129 |
Bug Report
Hey,
As the image shows, someone managed to visit a public url
/officeswhich normally shows an entry's content, but what has cached at cloudflare level is the Craft Two Factor Authentication setup page.I presume this has happened where a user who has not yet setup 2fa fully tried to login, abandoned that flow (or they were previously logged in before 2FA was enabled and it was retained), then they visited an uncached page and got this, maybe because the admin bar plugin is installed on this app and that triggered the 2fa html.
Is there anything which blitz can do to handle this?
Diagnostics Report
Application Info
Installed Plugins
Loaded Modules
Blitz Plugin Settings
{ "debug": false, "hintsEnabled": true, "cachingEnabled": true, "refreshCacheEnabled": true, "refreshMode": 1, "includedUriPatterns": [ { "enabled": "1", "siteId": "", "uriPattern": ".*" } ], "excludedUriPatterns": [], "cacheStorageType": "putyourlightson\\blitz\\drivers\\storage\\DummyStorage", "cacheStorageSettings": [], "cacheStorageTypes": [], "cacheGeneratorType": "putyourlightson\\blitz\\drivers\\generators\\HttpGenerator", "cacheGeneratorSettings": { "concurrency": "3" }, "cacheGeneratorTypes": [], "customSiteUris": [], "cachePurgerType": "putyourlightson\\blitz\\drivers\\purgers\\CloudflarePurger", "cachePurgerSettings": { "zoneIds": { "c52cfd68-1887-4a46-809b-017f537fddae": { "zoneId": "$CLOUDFLARE_ZONE_ID" }, "d79ae16a-0897-4271-92ee-a55f38854b40": { "zoneId": "$CLOUDFLARE_ZONE_ID" }, "3a9c30dc-38b5-4a41-9cd9-28520e9d0b5c": { "zoneId": "$CLOUDFLARE_ZONE_ID" }, "21c8b357-6985-4e5e-90be-f9ccbdbf25cb": { "zoneId": "$CLOUDFLARE_ZONE_ID" }, "0ac81c75-64e6-4542-9c77-1575607f2290": { "zoneId": "$CLOUDFLARE_ZONE_ID" } }, "authenticationMethod": "apiToken", "apiToken": "*******************", "apiKey": "", "email": "" }, "cachePurgerTypes": [], "deployerType": "putyourlightson\\blitz\\drivers\\deployers\\DummyDeployer", "deployerSettings": [], "deployerTypes": [], "ssiEnabled": false, "ssiTagFormat": "<!--#include virtual=\"{uri}\" -->", "detectSsiEnabled": true, "esiEnabled": false, "onlyCacheLowercaseUris": false, "queryStringCaching": 2, "includedQueryStringParams": [ { "enabled": "1", "siteId": "", "queryStringParam": ".*" } ], "excludedQueryStringParams": [ { "enabled": "1", "siteId": "", "queryStringParam": "gclid" }, { "enabled": "1", "siteId": "", "queryStringParam": "fbclid" }, { "enabled": "1", "siteId": "", "queryStringParam": "_gl" } ], "apiKey": "", "generatePagesWithQueryStringParams": true, "purgeAssetImagesWhenChanged": true, "refreshCacheAutomaticallyForGlobals": true, "refreshCacheWhenElementMovedInStructure": true, "refreshCacheWhenElementSavedUnchanged": false, "refreshCacheWhenElementSavedNotLive": false, "refreshExpiredCacheAfterVisit": true, "cacheNonHtmlResponses": false, "trackElements": true, "trackElementQueries": true, "excludedTrackedElementQueryParams": [], "cacheDuration": null, "nonCacheableElementTypes": [], "sourceIdAttributes": [], "liveStatuses": [], "integrations": [ "putyourlightson\\blitz\\drivers\\integrations\\CommerceIntegration", "putyourlightson\\blitz\\drivers\\integrations\\SeomaticIntegration" ], "defaultCacheControlHeader": "no-store", "cacheControlHeader": "public, s-maxage=31536000, max-age=0", "cacheControlHeaderExpired": "public, s-maxage=5, max-age=0", "sendPoweredByHeader": false, "outputComments": true, "refreshCacheJobPriority": 10, "driverJobBatchSize": 100, "driverJobPriority": 100, "queueJobTtr": 300, "maxRetryAttempts": 10, "maxUriLength": 255, "mutexTimeout": 1, "commands": [], "injectScriptEvent": "DOMContentLoaded", "injectScriptPosition": 3 }Recommendations
Site Tracking [1]
Site Tracking [2]
Site Tracking [4]
Site Tracking [5]
Site Tracking [6]
The text was updated successfully, but these errors were encountered: