Cache response body rather than exposed status

DivineOmega / password_exposed

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

GNU Lesser General Public License v3.0

213 stars 34 forks source link

Closed DivineOmega closed 6 years ago

DivineOmega commented 6 years ago

Prevent full SHA1s being exposed in cache file names, by setting the cache key to the first 5 characters of the hash.
Caching the response body, rather than the exposed status.

Thanks to @symm for the original idea. :)