Glassdoor: Web Cache Deception

A web caching issue was discovered on an endpoint which inappropriately cached a user's feed page under certain conditions...

WS-2022-0362

In Apollo Server 3 and 4, the "cache-control" HTTP response header may not reflect the cache policy that should apply to an HTTP request when that HTTP request contains multiple operations using HTTP batching. This could lead to data being inappropriately cached and shared. Apollo Server allows...