038d530565
Session ID is used as a parameter for the revoke session endpoint but it should never be included in the HTML as an attacker could obtain it via XSS. |
||
---|---|---|
.. | ||
account_spec.rb | ||
active_sessions_spec.rb | ||
chat_names_spec.rb | ||
emails_spec.rb | ||
gpg_keys_spec.rb | ||
keys_spec.rb | ||
oauth_applications_spec.rb | ||
password_spec.rb | ||
personal_access_tokens_spec.rb | ||
user_changes_notified_of_own_activity_spec.rb | ||
user_edit_profile_spec.rb | ||
user_manages_applications_spec.rb | ||
user_manages_emails_spec.rb | ||
user_visits_notifications_tab_spec.rb | ||
user_visits_profile_account_page_spec.rb | ||
user_visits_profile_authentication_log_spec.rb | ||
user_visits_profile_preferences_page_spec.rb | ||
user_visits_profile_spec.rb | ||
user_visits_profile_ssh_keys_page_spec.rb |