vue-storefront icon indicating copy to clipboard operation
vue-storefront copied to clipboard

Default address is being cached and leaked to anonymous customer

Open sync-by-unito[bot] opened this issue 4 years ago • 0 comments
trafficstars

After logging out, customer's default address remains in cache, therefore it can be accessed by anonymous customer in the same browser. Although these days such scenario is highly unlikely as most people use their personal devices to access the web, it might still be perceived as a valid bug.

Expected result

After logging out all personal data is being erased from cache/storage

Actual result

After logging out, customer's default address remains in cache and can be leaked inside the same browser instance.

Steps to reproduce

  1. Log in as a customer
  2. Add new shipping address and set is as default
  3. Add product to cart and proceed to Checkout
  4. Complete first Checkout step with default address selected
  5. Log out
  6. Add product to cart as an anonymous customer and proceed to Checkout
  7. [optional] Reload Checkout step if address is not yet filled

sync-by-unito[bot] avatar Aug 25 '21 12:08 sync-by-unito[bot]