New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Session State Element #16

Open

curea opened this issue Oct 25, 2016 · 1 comment

Assignees

Milestone

curea commented Oct 25, 2016

Flag the following issues in the session state element:

mode="StateServer" - Missing auth for session data on remote server and and insecure transmission of session data.
timeout < RuleOptions.SessionExpirationMax
mode="SQLServer" and sqlConnectionString contains a connection string password

https://msdn.microsoft.com/en-us/library/h6bb9cz9(v=vs.71).aspx

ejohn20 self-assigned this

Member

ejohn20 commented Oct 25, 2016

1 and 2 were added released in v1.0.2. Still need to add item 3.

ejohn20 added this to the 1.0.4 milestone

ejohn20 modified the milestones: 1.0.5, 1.0.4

ejohn20 modified the milestones: 1.0.6, 1.0.5

ejohn20 modified the milestones: 1.0.7, 1.0.6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment