Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Patch #527

Merged
merged 3 commits into from
Nov 25, 2024
Merged

Security Patch #527

merged 3 commits into from
Nov 25, 2024

Conversation

donaldzou
Copy link
Owner

@donaldzou donaldzou commented Nov 24, 2024

  • Added session.clear() to clean the session specific to each login session
  • Clear all cookie with the signout request and also clear again (just in case) in the frontend code.

- Added `session.clear()` to clean the session specific to each login session
- Clear all cookie with the `signout` request and also clear again (just in case) in the frontend code.
@donaldzou donaldzou changed the title Fix issue #516 Security Patch Nov 24, 2024
@donaldzou donaldzou requested a review from DaanSelen November 24, 2024 17:48
@donaldzou donaldzou self-assigned this Nov 24, 2024
@donaldzou
Copy link
Owner Author

@NOXCIS Hi, when you're free, do you mind testing this branch and see if it solved the issue where you can still do API call even after signed out? I've tested on my side and now you can't. Thanks in advance ;)

@donaldzou donaldzou linked an issue Nov 24, 2024 that may be closed by this pull request
@donaldzou donaldzou merged commit 4524a55 into main Nov 25, 2024
3 checks passed
@donaldzou donaldzou deleted the fix-#516 branch November 25, 2024 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

API Exploits | Possibilty for XSS | Diabled API w/ No Keys = FreeAPI
2 participants