4 ms·
If anyone can access a session based on ID in a URL, that sounds like a security vulnerability waiting to happen. There are good reasons that we decided those t
by theandrewbailey 1y ago
If anyone can access a session based on ID in a URL, that sounds like a security vulnerability waiting to happen. There are good reasons that we decided those things should go in cookies a long time ago.
- ttoinou 1y agoI guess it's stored in my cookies as well. But I need to visit that specific URL. Maybe I'm wrong and I only need to visit service.com/fdoit instead of service.com but then the same question remains