4 replies

Caching & public data exposed

Hi I am trying to migrate my site to cloudflare pages using @Cloudflare/next-on-pages and switching to the nextjs edge runtime.

I am having issues with what I assume is nextjs internal caching / cloudflare caching my site. Some users are able to see the wrong data / sensitive data of other users

I export the following config on all of my site pages:

export const runtime = 'edge';
export const dynamic = 'force-dynamic';
export const fetchCache = 'force-no-store';

export const runtime = 'edge';
export const dynamic = 'force-dynamic';
export const fetchCache = 'force-no-store';

and I have middleware.ts setup to disable cache control

const response = NextResponse.next({
        request: {
            headers: reqHeaders,
        },
    });
    response.headers.set('Cache-Control', 'no-store');
    return response;

const response = NextResponse.next({
        request: {
            headers: reqHeaders,
        },
    });
    response.headers.set('Cache-Control', 'no-store');
    return response;

When the cache hits for a page, it returns this (reference image) instead of actually rendering the page. if you scroll down it returns data that should be locked behind auth but is not. this page should be rendered using react server components but instead gives this.

i assume i have configured something wrong.

Cloudflare Developers•13mo ago•

4 replies

Collin22

Caching & public data exposed

export const runtime = 'edge';
export const dynamic = 'force-dynamic';
export const fetchCache = 'force-no-store';

export const runtime = 'edge';
export const dynamic = 'force-dynamic';
export const fetchCache = 'force-no-store';

and I have middleware.ts setup to disable cache control

const response = NextResponse.next({
        request: {
            headers: reqHeaders,
        },
    });
    response.headers.set('Cache-Control', 'no-store');
    return response;

const response = NextResponse.next({
        request: {
            headers: reqHeaders,
        },
    });
    response.headers.set('Cache-Control', 'no-store');
    return response;

Caching & public data exposed

Similar Threads

Caching & public data exposed

Similar Threads

Similar Threads

Similar Threads