3 ms·
As far as I can tell "by logging out before delivering the data, he can render any session cookies invalid" means that if you use this mechanism and forget to s
by nieve 5y ago
As far as I can tell "by logging out before delivering the data, he can render any session cookies invalid" means that if you use this mechanism and forget to sign out partway through the process you're potentially handing over session cookies. This seems like a really unsafe design.
- curtain 5y agoI think you hand them over regardless, the logout is to render them invalid. I wonder how many sites neglect that part.