Skip to content

[PR #1303/877e9e72 backport][3.32] Fix Simple API cache poisoning via ?format=json - #1304

Open
patchback[bot] wants to merge 1 commit into
3.32from
patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303
Open

[PR #1303/877e9e72 backport][3.32] Fix Simple API cache poisoning via ?format=json#1304
patchback[bot] wants to merge 1 commit into
3.32from
patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303

Conversation

@patchback

@patchback patchback Bot commented Jul 27, 2026

Copy link
Copy Markdown

This is a backport of PR #1303 as merged into main (877e9e7).

Summary

Test plan

  • oci-env test -p pulp_python functional -- -k test_simple_cache -v
  • Confirm a ?format=json warm followed by the same Accept without format returns HTML 200 (not 500)

Made with Cursor

Key the Simple API cache on the negotiated media type so a JSON
response from ?format=json cannot be served for a later HTML request
with the same Accept header.

closes #1302
Assisted By: Cursor Grok 4.5

Co-authored-by: Cursor <cursoragent@cursor.com>
(cherry picked from commit 877e9e7)
@jobselko

Copy link
Copy Markdown
Member

We need to backport pulp/pulpcore#7890 to core 3.105 to fix the lowerbounds.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants