Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File Manager: Tabs information should be user-specific between sessions #478

Closed
alexp999 opened this issue May 31, 2016 · 2 comments
Closed
Labels

Comments

@alexp999
Copy link

alexp999 commented May 31, 2016

If you login as a non-admin webmin site use and use filemin, when you log in as a different user (e.g. root), it tries to load the previous path opened in filemin when you open it (I assume set via cookie which isn't cleared on logout?), but returns an error as it can't find it, disclosing the path the last user was looking at.

I realise this isn't a big deal as it requires two different users to be using the same PC and browser, however as I frequently flick between the admin account and site user accounts, I've noticed it and I thought I'd better bring it up in case it is just part of a bigger issue.

@iliajie
Copy link
Collaborator

iliajie commented May 31, 2016

Hi,

It sounds as very possible issue. I will try to add user checking. It happens because of new feature - tabs.

Thanks for reporting!

@iliajie iliajie added the bug label May 31, 2016
@iliajie iliajie changed the title Filemin path information disclosure between sessions/users File Manager: Tabs information should be user-specific between sessions Jun 7, 2016
@iliajie
Copy link
Collaborator

iliajie commented Jun 9, 2016

That was hard.

Version 18.01 will make it possible.

Thanks for the idea.

@iliajie iliajie closed this as completed Jun 9, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants