We've enabled CDN cache (Cloudflare) on several pages and noticed, on the rare occassion, the Episerver Menu is visible in top-right corner when the page is served by CDN cache.
How to replicate:
- Sign as a user with access to the CMS
- Clear the CDN cache
- Visit a page that is served by CDN cache so the page is added to CDN cache
- In incognito mode, visit the same page from Step 3
- Notice the Episerver menu is visible on the top-right corner. On a positive note, the links do not allow the user access to the CMS because Cloudflare deletes all cookies.
I suggest Episerver update their menu so it's only visible when the forms login cookie is present. In the meantime, we'll use the Bypass Cache on Cookie setting in our Cloudflare page rules.