Re: Same cache file for all users

2019-08-18 Thread Jens
In web development, security is enforced on the server and not in the browser. Even if they would have different kind of cache files, an attacker could still "guess" URLs and download other files. Actually someone can simply login to your server and communicate with it without ever using your G

Same cache file for all users

2019-08-16 Thread Idan Pwc
Hi all, I'm just reviewing a app and I notice all the users in the app (all have different level of authorization) uses the same cache file, is that a problem? I'm a bit worried that if they have the same cache file they could deobfuscate the file and see function they shouldn't have access to.