JF Bélisle comments

Repositories
Issues
Comments

Results 3 comments of


                                            JF Bélisle

Rolling session with absolute expiry time

Any update on this PR ? It's exactly the feature we want to integrate in our session. Which is also an OWASP recommandation.

Rolling session with absolute expiry time

This is the issue, https://github.com/expressjs/session/pull/595 Thanks for taking the time

Possible security risks of the integration

Hi, we have the exact same concerns as you @kkiiskin and @MURBASLMS, mainly with the Directory.ReadWrite.All permissions which can have MASSIVE implications since there is no kind of "self" scope...