I tested the suggested workaround by adding gform_file_upload_* to the ESI Nonces setting, clearing the cache, and re-enabling cache on the Gravity Forms page.
After more than one hour serving the cached page, the file upload field still works and no 403 error occurs.
So this seems to confirm that registering the Gravity Forms file upload nonce for ESI resolves the issue. Thanks!
Thanks for the quick patch. The code looks like it should address the issue by registering the Gravity Forms file upload nonce for ESI.
However, I’m not comfortable installing a beta build on production client websites, and I don’t currently have time to set up a dedicated development environment just to test this patch.
Do you have an estimated timeline for including this fix in a stable public release?
In the meantime, we’ll continue excluding pages containing Gravity Forms with file upload fields from cache, as we already do.