Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

V2: Encrypt and Clear history #131

Open
4 tasks
PedroAugustoRamalhoDuarte opened this issue Oct 6, 2024 · 0 comments
Open
4 tasks

V2: Encrypt and Clear history #131

PedroAugustoRamalhoDuarte opened this issue Oct 6, 2024 · 0 comments

Comments

@PedroAugustoRamalhoDuarte
Copy link
Contributor

In Inertia V2, we will have one feature to encrypt and clear the history of the browser;

Context

The main goal of this feature is to address this issue inertiajs/inertia#1784, that is a potential security issue with the back history go back when multiple users uses the same browser

Implementation

Inspired by Inertia Laravel's implementation, we need to complete the following task:

  • Send in the page response clearHistory and encryptHistory props
  • Create a function that clear the history inside the controller
  • Create a new config to encryptHistory or not
  • Maybe create a middleware to always encrypt the history based on config (src/EncryptHistoryMiddleware.php). Maybe for the rails world, one before_action is enough
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant