Fragment assembly: a cached shell with the personalised holes filled at the edge.
The holes are BigPipe's own data-big-pipe-placeholder-id spans. Deciding when to serve a shell
is the dangerous half: a wrong permit discloses one visitor's content to another while a refusal
only renders the page as usual, so every unknown resolves to unsafe.
Fragment assembly: a cached shell with the personalised holes filled at the edge.
The holes are BigPipe's own
data-big-pipe-placeholder-idspans. Deciding when to serve a shell is the dangerous half: a wrong permit discloses one visitor's content to another while a refusal only renders the page as usual, so every unknown resolves tounsafe.