Web cache deception on authenticated pages

Trick a CDN into caching a victim's private page by appending a static-looking extension the origin ignores but the cache keys on.