DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
A code review finds an endpoint returning Cache-Control: public, max-age=3600 on GET /api/me/orders (the CURRENT user's order history). What should be flagged?
A
Nothing — long cache times are always good for performance
B
This is a data-leak risk — 'public' allows shared caches to potentially serve one user's private order data to a different user requesting the same cached URL
C
max-age=3600 is too short, should be flagged for being too aggressive
D
This is only a problem if the endpoint uses POST
Check Answer