Skip to content

Conversation

bfiessinger
Copy link

This PR introduces a new Wizard Repository based on Browser sessions.
As mentioned in #23 there is a possibility to find sensitve Data saved in a Wizard just by guessing ID's.

@bfiessinger bfiessinger changed the title New Wizard Repository SessionWizardRepository (closes #23) New Wizard Repository SessionWizardRepository (closes 23) Sep 10, 2021
@bfiessinger bfiessinger changed the title New Wizard Repository SessionWizardRepository (closes 23) New Wizard Repository SessionWizardRepository (closes #23) Sep 10, 2021
@marcreichel
Copy link

@bfiessinger I've implemented your Session Repository in my application and it works like a charm 👌🏽 Thank you very much 🙌🏼

In my opinion the SessionWizardRepository should be the default Repository because of the mentioned security concerns.

@mbryne
Copy link

mbryne commented May 13, 2022

Can this be merged?

@sebsobseb
Copy link

Can this be merged please? @ksassnowski

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants