[wp-trac] [WordPress Trac] #58433: WP version in Etag header in load-styles.php file

WordPress Trac noreply at wordpress.org
Thu Jun 1 00:09:00 UTC 2023


#58433: WP version in Etag header in load-styles.php file
--------------------------+------------------------------
 Reporter:  dav4          |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by peterwilsoncc):

 It might be worth changing how the ETAG header is generated, not to hide
 the WordPress version but in order to better calculate a value that
 changes with the scripts' versions rather than the WordPress version.

 As is, a 304 HTTP response may be returned despite the scripts' version
 changing. I've attached a POC to demonstrate a more accurate response.
 This helps explain some caching issues I've had working on WordPress-
 Develop.

 While the POC does hide the WP version behind a hash, it won't help hide
 the WordPress version from any bots as the ETAG header would continue to
 provide a method for bots to determine the current version of WP if they
 store the hashes.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58433#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list