-
Notifications
You must be signed in to change notification settings - Fork 112
Closed
Labels
Description
https://github.com/nextcloud/text/blob/main/lib/Controller/SessionController.php#L110 should get reset after controller method calls that make use of it as otherwise this may load to the current session getting updated with a different user.
I've seen this happening locally with:
- tab 1: Having a tab open with a text editor
- tab 2: Logout in a second tab
- tab 2: Login as a different user
- tab 2: Navigate to another page
- tab 2: See that you're logged in as the previous user
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
☑️ Done