Skip to content

[PR #1303/877e9e72 backport][3.32] Fix Simple API cache poisoning via ?format=json - #1304

Merged
jobselko merged 1 commit into
3.32from
patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303
Jul 29, 2026
Merged

[PR #1303/877e9e72 backport][3.32] Fix Simple API cache poisoning via ?format=json#1304
jobselko merged 1 commit into
3.32from
patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303

Conversation

@patchback

@patchback patchback Bot commented Jul 27, 2026

Copy link
Copy Markdown

This is a backport of PR #1303 as merged into main (877e9e7).

Summary

Test plan

  • oci-env test -p pulp_python functional -- -k test_simple_cache -v
  • Confirm a ?format=json warm followed by the same Accept without format returns HTML 200 (not 500)

Made with Cursor

@jobselko

Copy link
Copy Markdown
Member

We need to backport pulp/pulpcore#7890 to core 3.105 to fix the lowerbounds.

Key the Simple API cache on the negotiated media type so a JSON
response from ?format=json cannot be served for a later HTML request
with the same Accept header.

closes #1302
Assisted By: Cursor Grok 4.5

Co-authored-by: Cursor <cursoragent@cursor.com>
(cherry picked from commit 877e9e7)
@jobselko
jobselko force-pushed the patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303 branch from 079292a to 621dc79 Compare July 29, 2026 14:38
@jobselko
jobselko merged commit 2291942 into 3.32 Jul 29, 2026
14 checks passed
@jobselko
jobselko deleted the patchback/backports/3.32/877e9e727c5dd6efb878d7f212ff46d6f8fe28f4/pr-1303 branch July 29, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants