Re: Security enhancement

2015-09-26 Thread Deepak Dixit
4.x >> >> Best regards, >> >> Pierre Smits >> >> *OFBiz Extensions Marketplace* >> http://oem.ofbizci.net >> >> On Thu, Sep 24, 2015 at 11:27 AM, Deepak Dixit < >> deepak.di...@hotwaxsystems.com> wrote: >> >>> Hi

Security enhancement

2015-09-24 Thread Deepak Dixit
Hi Dev, I would like to propose some security enhancement at web-app level. IMO we have to enhance sessionId and cookie tracking. As per current implementation: - The cookie containing the session identifier is not secure - The session identifier is transmitted in the query string of the URL

Re: Security enhancement

2015-09-24 Thread Jacques Le Roux
regards, Pierre Smits *OFBiz Extensions Marketplace* http://oem.ofbizci.net On Thu, Sep 24, 2015 at 11:27 AM, Deepak Dixit < deepak.di...@hotwaxsystems.com> wrote: Hi Dev, I would like to propose some security enhancement at web-app level. IMO we have to enhance sessionId and cookie tr

Re: Security enhancement

2015-09-24 Thread Pierre Smits
AM, Deepak Dixit < deepak.di...@hotwaxsystems.com> wrote: > Hi Dev, > > I would like to propose some security enhancement at web-app level. > IMO we have to enhance sessionId and cookie tracking. As per current > implementation: > - The cookie containing the session