038d530565
Session ID is used as a parameter for the revoke session endpoint but it should never be included in the HTML as an attacker could obtain it via XSS.
7 lines
203 B
Ruby
7 lines
203 B
Ruby
# frozen_string_literal: true
|
|
|
|
class Profiles::ActiveSessionsController < Profiles::ApplicationController
|
|
def index
|
|
@sessions = ActiveSession.list(current_user).reject(&:is_impersonated)
|
|
end
|
|
end
|