stale-while-revalidate leak
Quirk · GET /api/x402/edge-swr-leak · Edge / CDN Controls
A stale-while-revalidate directive lets the edge serve cached protected content without payment during revalidation.
Explanation
The paid 200 carries a stale-while-revalidate directive, which lets the edge serve cached protected content to clients while it revalidates in the background — without a fresh payment. Protected, paid content must not be served stale; the merchant's cache directives are the root cause.
What to watch
curl -i: the paid 200 carries stale-while-revalidate — protected content is served stale and unpaid.
Facilitator
Settled against the live Radius testnet facilitator (https://facilitator.testnet.radiustech.xyz). A valid payment runs a real /verify and /settle on-chain.
Metadata
- Status: Quirk
- Method: GET
- Price: 0.0001 (100 atomic)
- Responsible party: Merchant