arcanist
arcanist copied to clipboard
New Wizard Repository SessionWizardRepository (closes #23)
This PR introduces a new Wizard Repository based on Browser sessions. As mentioned in #23 there is a possibility to find sensitve Data saved in a Wizard just by guessing ID's.
@bfiessinger I've implemented your Session Repository in my application and it works like a charm 👌🏽 Thank you very much 🙌🏼
In my opinion the SessionWizardRepository
should be the default Repository because of the mentioned security concerns.
Can this be merged?
Can this be merged please? @ksassnowski