[wp-trac] [WordPress Trac] #58433: WP version in Etag header in load-styles.php file
WordPress Trac
noreply at wordpress.org
Thu Jun 1 00:09:00 UTC 2023
#58433: WP version in Etag header in load-styles.php file
--------------------------+------------------------------
Reporter: dav4 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Resolution:
Keywords: | Focuses:
--------------------------+------------------------------
Comment (by peterwilsoncc):
It might be worth changing how the ETAG header is generated, not to hide
the WordPress version but in order to better calculate a value that
changes with the scripts' versions rather than the WordPress version.
As is, a 304 HTTP response may be returned despite the scripts' version
changing. I've attached a POC to demonstrate a more accurate response.
This helps explain some caching issues I've had working on WordPress-
Develop.
While the POC does hide the WP version behind a hash, it won't help hide
the WordPress version from any bots as the ETAG header would continue to
provide a method for bots to determine the current version of WP if they
store the hashes.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/58433#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list