easy5 pts · first answer countsauthenticationsessions

Session id in the URL

An old app puts the session id in the URL, like /account?sid=abc123. Why is that unsafe?

A.URLs cannot hold more than 10 charactersB.Search engines refuse to index such pagesC.URLs leak through history, logs and shared linksD.Browsers delete query strings on refresh

Discussion 0

Join free to post in the discussion.

Session id in the URL

Discussion 0

Related questions