Re:Prevent information leaking in Rails
by colinyoung on Wednesday October 28, 2015 @06:50PM
(#10467965)
This is hardly a flaw in Rails - if the user's login session isn't ended before handing physical access to another person, that's not really the software's problem.
[ Parent
| on HN ]
Re:Prevent information leaking in Rails
by gregmolnar on Thursday October 29, 2015 @02:42AM
(#10469602)
I didn't say it is a flaw. IMHO the default caching setting is how it should be, but the developer should be aware of the http caching, and should turn it off where it can lead to information leaking.