X-Git-Url: https://git.martlubbers.net/?a=blobdiff_plain;f=report%2Fv3_session.tex;h=4decd565494a757f8f8acfe1a15602f0ef5bf94e;hb=8393e7fae8720a46bc2832b8236b766f285a784d;hp=b2fa838f071066f3766d74a497db6537ec093f3b;hpb=e71ae424936ecb03212e33fa41cc37451e0d6a9e;p=ssproject1617.git diff --git a/report/v3_session.tex b/report/v3_session.tex index b2fa838..4decd56 100644 --- a/report/v3_session.tex +++ b/report/v3_session.tex @@ -1,4 +1,4 @@ -\begin{enumerate}[label={3.\arabic*}] +\begin{enumerate}[label={V3.\arabic*}] \item \pass{} @@ -40,7 +40,7 @@ \begin{result} The logout functionality is plainly visible on the top right of the application on every page that requires authentication. This is defined in - \srcref{admin/themes/header.php}{16-30} + \srcref{admin/themes/header.php}{16{-}30} \end{result} @@ -67,6 +67,7 @@ \end{result} + \setcounter{enumi}{9} \notapplicable{% \item Verify that only session ids generated by the application framework are @@ -91,11 +92,12 @@ session tokens additionally set the “HttpOnly” and “secure” attributes. \begin{result} There is just one cookie for tha application and it's path includes the whole - site. However this seems appropriate. The "HttpOnly" and "secure" + site. However this seems appropriate. The ``HttpOnly'' and ``secure'' attributes are not set for this cookie. \end{result} + \setcounter{enumi}{15} \item \pass{} Verify that the application limits the number of active concurrent sessions. @@ -119,7 +121,7 @@ Verify the user is prompted with the option to terminate all other active sessions after a successful change password process. \begin{result} - There is no such option, also notqeable is that there is no confirmation for + There is no such option, also notaeable is that there is no confirmation for the password change. \end{result}