search

pepyatka / pepyatka-html

HTML client for Pepyatka
MIT License
16 stars 25 forks source link

Session information leaks #453

Open berkus opened 9 years ago

berkus commented 9 years ago

Steps.

  1. Login as user1 in tab1
  2. Login as user2 in tab2
  3. Go back to tab1
  4. You can now like posts as TWO users.

Video demo: https://www.dropbox.com/s/ny0xfk22rwqlsje/like-bug.mov?dl=0

epicmonkey commented 9 years ago

per discuss: only local user/browser is affected.