2

I just encounter an issue, the cached js files showed porn site

Network diagram

Here's the simple network diagram.

https://cdn.mysite.com/js/app.js shows a porn site, but if I add in query string

https://cdn.mysite.com/js/app.js?t=20180928130702, then it displays the correct content

AWS S3 show correct file

The content in AWS S3 is correct.

How does the attacker alter the content in the middle? How to prevent this?

P/S: a temporary solution is disable the CDN for now

Js Lim
  • 121
  • 3

0 Answers0