[ZBXNEXT-6387] Limit access to session_key from settings.get - ZABBIX SUPPORT

XML

Word

Printable

Details

Type: New Feature Request
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 5.2.3rc1, 5.4.0alpha1, 5.4 (plan)
Component/s: API (A), Documentation (D)
Labels:
- cookie
- security

Team:
Team D
Sprint:
Sprint 71 (Dec 2020)
Story Points:
0.25

Description

It should not be possible to retrieve session_key by just using settings.get or settings.getglobal.
This option should be returned in these requests, only if these requests are done from frontend.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

Selection_020.png
220 kB
2020 Nov 20 16:57

Issue Links

caused by

ZBX-18799 PHP fatal error happens if working with multiple browser tabs was made logout

Closed

Activity

People

Assignee:: Roberts Lataria (Inactive)

Reporter:: Valdis Murzins

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Dates

Created:: 2020 Oct 21 11:57

Updated:: 2020 Dec 22 15:22

Resolved:: 2020 Dec 14 10:30