htl-anichstrasse/sokka

ACP currently allows user to manually edit cookie

Closed this issue · 1 comments

bemoty commented

Users with enough experience can easily alter caching token cookie to circumvent login and see the ACP frontend. Although the user cannot alter any data in the ACP, this is unwanted.

bemoty commented

fixed in 484adfa