Skip to content

Security: Clear clipboard on logout and when privileges change #3512

Description

@lastzero

As a user who shares his/her browser with other users or uses multiple accounts with different permissions, I want all local storage to be cleared when I log out or switch accounts so that random entity UIDs are not leaked.

When you clear the entire local storage, the search sort order, view type, and expanded navigation state are also reset. So this might not please all users. Changes therefore require UX testing. Alternatively, it would be possible to delete only the clipboard contents and leave the rest intact.

This is related to the following report:

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

releasedAvailable in a stable releasesecurityImpact on server or browser securityuxImpacts User Experience

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions