Closed
Bug 849483
Opened 12 years ago
Closed 12 years ago
No session timeout in bugzilla.mozilla.org
Categories
(bugzilla.mozilla.org :: General, defect)
Tracking
()
RESOLVED
INVALID
People
(Reporter: satishb3, Unassigned)
Details
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.155 Safari/537.22
Steps to reproduce:
Bugzilla.mozilla.org does not expire the user’s session even after 24 hours of inactivity.
Steps to reproduce:
1. Log into the website https://bugzilla.mozilla.org
2. Leave the website for more than 1 hour. Now click on any link and notice that the user’s session is still accessible.
Actual results:
User's session is not expired even after a day of inactivity.
Expected results:
The website should logout user's session automatically after 60 minutes of inactivity.
For more info on session timeout problem visit - https://www.owasp.org/index.php/Session_Timeout
Comment 1•12 years ago
|
||
This is not a bug but the desired behavior. Most developers would hate to be logged out every hour or so. You are free to log out if you don't use your session anymore.
Group: bugzilla-security
Status: UNCONFIRMED → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•