The Transformers Forged to Fight community has officially moved to Discord. For all the latest news and updates, join us here!
Bug - Raid Start Despite Session Disconnect
sc00b3
Posts: 33
It seems after a session disconnect (stale session due to inactivity), the system still allows actions to be performed. It seems that the check for an active session is NOT done before certain actions.
Obviously this scenario is low priority and trivial (regarding raid ticket), but has ramifications for instances like started fights, etc. especially if the penalty goes back up (or the scenario is such that people cry bloody murder). This might also affect security as an exploitable surface (committing actions that are technically unprivileged due to expiring session).
Thank you!
- In this instance, my session was dead, yet I was able to search for a raid.
- This consumed 1 raid ticket, and the search started
- I was then presented with the Session Disconnect prompt to re-login
- Raid ticket was consumed despite never having the opportunity to utilize it
Obviously this scenario is low priority and trivial (regarding raid ticket), but has ramifications for instances like started fights, etc. especially if the penalty goes back up (or the scenario is such that people cry bloody murder). This might also affect security as an exploitable surface (committing actions that are technically unprivileged due to expiring session).
Thank you!
0