vue-storefront
vue-storefront copied to clipboard
Default address is being cached and leaked to anonymous customer
trafficstars
After logging out, customer's default address remains in cache, therefore it can be accessed by anonymous customer in the same browser. Although these days such scenario is highly unlikely as most people use their personal devices to access the web, it might still be perceived as a valid bug.
Expected result
After logging out all personal data is being erased from cache/storage
Actual result
After logging out, customer's default address remains in cache and can be leaked inside the same browser instance.
Steps to reproduce
- Log in as a customer
- Add new shipping address and set is as default
- Add product to cart and proceed to Checkout
- Complete first Checkout step with default address selected
- Log out
- Add product to cart as an anonymous customer and proceed to Checkout
- [optional] Reload Checkout step if address is not yet filled