Security Patch - Githubissues

donaldzou / WGDashboard

Simple dashboard for WireGuard VPN written in Python & Vue.js

https://donaldzou.github.io/WGDashboard-Documentation/

Apache License 2.0

1.63k stars 252 forks source link

Security Patch #527

Open donaldzou opened 12 hours ago

donaldzou commented 12 hours ago

Added session.clear() to clean the session specific to each login session
Clear all cookie with the signout request and also clear again (just in case) in the frontend code.

donaldzou commented 12 hours ago

@NOXCIS Hi, when you're free, do you mind testing this branch and see if it solved the issue where you can still do API call even after signed out? I've tested on my side and now you can't. Thanks in advance ;)