A cache keyed on the path

Cache in the middle

A caching proxy sits on port 8081 in front of the app. Fetch a page through it and watch the X-Cache header: the first request is a MISS (fetched from the app and stored), the second a HIT (served from cache):

curl -s -i http://127.0.0.1:8081/app/home | grep -i x-cache
curl -s -i http://127.0.0.1:8081/app/home | grep -i x-cache

In the terminal

student@vulntech:~$ curl -s -i http://127.0.0.1:8081/app/home | grep -i x-cache
X-Cache: MISS
student@vulntech:~$ curl -s -i http://127.0.0.1:8081/app/home | grep -i x-cache
X-Cache: HIT

The cache key here is only the path (/app/home). Anything else about the request that changes the response — but isn't in the key — is an unkeyed input, and that's the opening.