We have moved to Github. Please open tickets there.

Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#2136 closed Defect (fixed)

session signature breaks sessions for IE with chrome frame

Reported by: cash Owned by:
Priority: normal Milestone: Elgg 1.7.2
Component: Core Version: 1.7
Severity: critical Keywords:
Cc: brettp Difficulty:

Description

See ​http://cashcostello.com/blog/2010/04/session-security-and-googles-chrome-frame.html

Change History (2)

comment:1 Changed 3 years ago by cash

  • Resolution set to fixed
  • Status changed from new to closed

(In [svn:6011]) Fixes #2136 - removed session fingerprint using user agent - not dependable, nor does it provide any increase in security

comment:2 Changed 3 years ago by coldtrick

This also solves a problem related to ie8 and ie9 switching compatibility mode during a session (and therefore changing the user agent).

​http://stackoverflow.com/questions/3726357/why-does-ie9-switch-to-compatibility-mode-on-my-website

Note: See TracTickets for help on using tickets.