add cache poisoning

xanhacks · Nov 3, 2023 · f54a07b · f54a07b
1 parent 0876aa5
commit f54a07b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/content/en/docs/framework/drupal.md b/content/en/docs/framework/drupal.md
@@ -52,4 +52,5 @@ toc: true
 
 ### Others
 
-- Drupal often use `$_REQUEST` instead of `$_GET` or `$_POST`, so you can switch a POST request to a GET request and vice versa.
+- Drupal frequently utilizes `$_REQUEST` over `$_GET` or `$_POST`, allowing you to alternate between POST and GET requests.
+- Drupal commonly caches web requests based on the `User-Agent`. Additionally, some URLs on HTML pages include the `Host` HTTP header. This can occasionally lead to cache poisoning and the generation of harmful URLs on the intended site.