[jira] [Commented] (OFBIZ-9302) logout security

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-9302) logout security

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-9302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15954864#comment-15954864 ]

Moatasim Al Masri commented on OFBIZ-9302:
------------------------------------------

for sure in your case, the issue will not happened, because you clear and close all sessions manually.

> logout security
> ---------------
>
>                 Key: OFBIZ-9302
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9302
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ALL APPLICATIONS
>    Affects Versions: Release Branch 16.11
>            Reporter: Moatasim Al Masri
>         Attachments: logout2.wmv, logout.wmv
>
>
> am trying to check OFBIZ security authentication, and I found when we logedout the session still open in browser, that if we press back from browser we can reopen the session and continue see our application without any authentication.
> please see the video attached : logout.wmv



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)