cf-rsc-lab

META page=home deployment=dpl_7CwaqSeW8qqNpGBKTnK3PPxAAbwy nonce=88e51d80-cefc-4522-8f66-18124f95a084 rendered=2026-11-04T16:52:35.828Z

• /stream-test: dynamic, streamed. Cloudflare must BYPASS it.
• /cached/static and /cached/other: static pages on the Cloudflare allowlist.
• /cached/stream: dynamic, streamed, on the Cloudflare allowlist. This is the cache-fill case.
• /cached/personal: personalised but wrongly on the allowlist. This demonstrates the leak hazard.
• /personal: personalised, not on the allowlist.