Communiquez avec les autres et partagez vos connaissances professionnelles

Inscrivez-vous ou connectez-vous pour rejoindre votre communauté professionnelle.

Suivre

How we can expire session in web application when we close a tab of browser?

user-image
Question ajoutée par Mohamad JAvad Khazali , Information Security Expert , Saman Bank
Date de publication: 2013/10/30
Prasath J
par Prasath J , Associate - Projects , Cognizant Technology Solutions

Session Invalidation from both client and server side while closing the browser.

 

Vishal Bhawnani
par Vishal Bhawnani , Assistant Manager - IT Security , Wall Street Exchange Centre LLC

Kill the logged in user session cookie when the logout option is been called & when the browser is closed terminate/flush that session cookie value so that the same cookie value can't be reused.

Utilisateur supprimé
par Utilisateur supprimé

Verify that the session id is changed or cleared on logout.

Verify that sessions are invalidated when the user logs out.

 

 

Verify that the session id is changed or cleared on logout.

Verify that sessions timeout after an administratively-configurable maximum time period regardless of activity (an absolute timeout).

Verify that the session id is changed on login to prevent session fixation.

Verify that the session id is changed on re-authentication.

 

More Questions Like This