How I Found an SSR Cache Isolation Failure in a React Data Fetching Library

There's a certain kind of bug that only shows up when you stop thinking about what code does and start thinking about when it does it. Most security researchers spend their time asking "can an attacke...