Mercurial > libervia-web
view doc/index.rst @ 1598:86c7a3a625d5
server: always start a new session on connection:
The session was kept when a user was connecting from service profile (but not from other
profiles), this was leading to session fixation vulnerability (an attacker on the same
machine could get service profile session cookie, and use it when a victim would log-in).
This patch fixes it by always starting a new session on connection.
fix 443
| author | Goffi <goffi@goffi.org> |
|---|---|
| date | Fri, 23 Feb 2024 13:35:24 +0100 |
| parents | 4b0464b2a12b |
| children |
line wrap: on
line source
.. Libervia (Salut à Toi) documentation master file, created by sphinx-quickstart on Thu Jan 24 15:20:15 2019. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive. Libervia Web documentation ========================== Welcome to Libervia's documentation. You'll find here both end-user end developer documentations. Libervia is the web frontend of Salut à Toi (or SàT), a Libre communication ecosystem based on XMPP standard. With Libervia you have access to main SàT features thanks to its easy to use pages. It is a highly customizable project, the interface can be modified from slight to major changes, so it can be adapted to your association, university, entreprise or community. Libervia includes its own web framework, using a unique architecture taking profit of the XMPP standard. You can follow this documentation to learn more on it, or join our official XMPP room at `libervia@chat.jabberfr.org <xmpp:libervia@chat.jabberfr.org?join>`_ (also available via a `web link <https://chat.jabberfr.org/converse.js/libervia@chat.jabberfr.org>`_) .. toctree:: :maxdepth: 3 :caption: Contents: installation.rst user/calls.rst web_framework/quick_start.rst web_framework/css_framework.rst Indices and tables ================== * :ref:`genindex` .. * :ref:`modindex` * :ref:`search`