X-Git-Url: https://git.martlubbers.net/?a=blobdiff_plain;f=report%2Fv3_session.tex;h=4decd565494a757f8f8acfe1a15602f0ef5bf94e;hb=37c1ce0fc9ce34e0629c0b4384edfbc1297f3e79;hp=94cf919142ea82ab109b8b9e1dff4eadd8e6f95f;hpb=b4eaf4d5efb8cea0c57c5d14be25ff38c1deeb2d;p=ssproject1617.git diff --git a/report/v3_session.tex b/report/v3_session.tex index 94cf919..4decd56 100644 --- a/report/v3_session.tex +++ b/report/v3_session.tex @@ -40,7 +40,7 @@ \begin{result} The logout functionality is plainly visible on the top right of the application on every page that requires authentication. This is defined in - \srcref{admin/themes/header.php}{16-30} + \srcref{admin/themes/header.php}{16{-}30} \end{result} @@ -67,6 +67,7 @@ \end{result} + \setcounter{enumi}{9} \notapplicable{% \item Verify that only session ids generated by the application framework are @@ -91,11 +92,12 @@ session tokens additionally set the “HttpOnly” and “secure” attributes. \begin{result} There is just one cookie for tha application and it's path includes the whole - site. However this seems appropriate. The "HttpOnly" and "secure" + site. However this seems appropriate. The ``HttpOnly'' and ``secure'' attributes are not set for this cookie. \end{result} + \setcounter{enumi}{15} \item \pass{} Verify that the application limits the number of active concurrent sessions. @@ -119,7 +121,7 @@ Verify the user is prompted with the option to terminate all other active sessions after a successful change password process. \begin{result} - There is no such option, also notqeable is that there is no confirmation for + There is no such option, also notaeable is that there is no confirmation for the password change. \end{result}