Atozed Forums

Hi,

What is the correct way to log out of from app? 
I'm using logout button with TerminateAndRedirect ('login_page.html"). 
The login page of my app is loaded again, but if I press backspace a few times, it shows forms of the  previously logged user.

Regards,

Luiz

Are you using HTTPS?

If using simple HTTP your pages are vulnerable even if expired and there is no way on earth that you can make a browser not to show its history.

There is an answer here on SO that explains it well:

https://stackoverflow.com/questions/4954...l-browsers

From where we can extract this link which contains the actual reason for this behavior:

https://httpwg.org/specs/rfc7234.html#history.lists

(11-08-2019, 11:27 AM)Alexandre Machado Wrote: [ -> ]Are you using HTTPS?

If using simple HTTP your pages are vulnerable even if expired and there is no way on earth that you can make a browser not to show its history.

There is an answer here on SO that explains it well:

https://stackoverflow.com/questions/4954...l-browsers

From where we can extract this link which contains the actual reason for this behavior:

https://httpwg.org/specs/rfc7234.html#history.lists

Thank you Alexandre