Boost Cacheability Settings seems not to work properly

D 9.5.10
boost 8.x-1.x-dev

Im having the same problem - Im tyring to exclude the contact pages but no matter what settings I try in the Boost Path Cacheability Settings it is still caching form data?

I have 3 page URLs added to hide but its caching these and not caching any other pages now so doing the opposite of what is needed?

Because we were seeing webforms displaying the latest previous submission this is a privacy/data issue. I had no option but to uninstall the boost module. As soon as I deleted the webform page from the boost cache the issue disappeared - I tried to set the form fields as autocomplete=off and same with form but this didnt help.

Until the "Boost Path Cacheability Settings" works so certain paths/pages can be excluded I cant use this module. Exposing submitted form data in my eyes is a pretty big issue.

I hope this can be sorted as its a great module.

setting to major as this exposes a privacy issue on webforms

Because the core logic to display blocks is based on regex this will not be the suggested method in future. Maybe there will be an API/UI change to get this working.
But there will be an additional method for excluding/including logic I currently also develop for the firewall module → . A partial paths would be possible ('/some/path/*'). But I also have ideas to check paths like "/dynamic/*/something" faster as core is currently doing with regex.