Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.
Restore session in Firefox 

What does this mean, is it related to the session concept which is stored on the web server?

If I stop the computer with my web-app, and then start it again before the timeout set on the session on the server expires, then anybody that starts the computer and clicks "restore session" could continue in my web-app where I left off.

Is there any way to kill the sessions after I close the browser like in IE and Google Chrome?

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

You are mixing the "session" as the current identifier of your browser/you in a web application, and the session of the user in her computer, meaning all the tabs opened.

Now for your other questions :

If I stop the computer with my web-app, and then start it again before the timeout set on the session on the server expires, then anybody that starts the computer and clicks "restore session" could continue in my web-app where I left off.

It depends on how you defined the session duration & expiration. You can define the session to expire when the browser is closed. If done so, the user won't be able to restore the session when he'll reopen it's browser. Now if you defined a duration instead, it depends if the session will have been expired or not.

Is there any way to kill the sessions after I close the browser like in IE and Google Chrome?

Like I said, just define no expiration date for the cookie session (if you use it like this) to expire when the browser is closed and it will be good.(see Wikipedia for that.)

share|improve this answer
add comment

I think your question and a solution are described in "Firefox doesn't delete cookies on exit. When will it do?" (https://support.mozilla.org/de/questions/938865).

Also see FireFox's restore previous session restores logins authenticated by server's sessions .

So in short: configure Firefox to delete your cookies on exit and us about:config to set

  • browser.sessionstore.privacy_level = 1 or 2
  • browser.sessionstore.privacy_level_deferred = 1 or 2.
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.