YanoSecConcepts / Session
Concept · short entry
Session
A way for an application to recognize related requests, often through an identifier in a cookie. It can maintain a signed-in state.
Taught in
- Authentication failures 09 · Web security
- Cross-site request forgery 09 · Web security
Also in
- How a web app is put together 06 · Web basics
This is a short entry. The lessons above are where the idea is taught with evidence and checks.