Joshua Poore created FLAGON-442:
-----------------------------------

             Summary: Update documentation for how to pass local storage, 
cookie data to sessionId
                 Key: FLAGON-442
                 URL: https://issues.apache.org/jira/browse/FLAGON-442
             Project: Flagon
          Issue Type: Sub-task
          Components: UserALE.js
    Affects Versions: UserALE.js 2.1.0
            Reporter: Joshua Poore
            Assignee: Joshua Poore
             Fix For: UserALE.js 2.1.0


I don't think we want userale.js to mess around with passing session data back 
and forth to local storage, as this global solution could open up 
vulnerabilities and will be tricky to achieve desired behavior with (e.g., all 
instances of the same app across tabs, have the same session_id, which is 
refreshed when all instances are closed or browser is closed) as we only have 
access to window properties with script tag deployment. 

Better strategy is to update documentation so that users/developers can pass 
their own local storage or cookie data to sessionid via the script-tag HTML 
parameter.



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

Reply via email to