X-Git-Url: https://git.martlubbers.net/?a=blobdiff_plain;f=report%2Fv3_session.tex;h=4decd565494a757f8f8acfe1a15602f0ef5bf94e;hb=8393e7fae8720a46bc2832b8236b766f285a784d;hp=fc9cd6c0415dcd24064559f2098cc993105dd957;hpb=06d7ae862f750a89968a0c7c2104b133e801d3a5;p=ssproject1617.git diff --git a/report/v3_session.tex b/report/v3_session.tex index fc9cd6c..4decd56 100644 --- a/report/v3_session.tex +++ b/report/v3_session.tex @@ -40,7 +40,7 @@ \begin{result} The logout functionality is plainly visible on the top right of the application on every page that requires authentication. This is defined in - \srcref{admin/themes/header.php}{16-30} + \srcref{admin/themes/header.php}{16{-}30} \end{result} @@ -67,6 +67,7 @@ \end{result} + \setcounter{enumi}{9} \notapplicable{% \item Verify that only session ids generated by the application framework are @@ -91,11 +92,12 @@ session tokens additionally set the “HttpOnly” and “secure” attributes. \begin{result} There is just one cookie for tha application and it's path includes the whole - site. However this seems appropriate. The "HttpOnly" and "secure" + site. However this seems appropriate. The ``HttpOnly'' and ``secure'' attributes are not set for this cookie. \end{result} + \setcounter{enumi}{15} \item \pass{} Verify that the application limits the number of active concurrent sessions.