https://scholion.thluiz.com/tags/session-hijacking/Recent content in Session-Hijacking on ScholionHugo -- gohugo.iopt-BR© 2026Sat, 29 Mar 2014 07:44:14 -0300https://scholion.thluiz.com/notes/dangers-of-session-hijacking-railscasts/Sat, 29 Mar 2014 07:44:14 -0300https://scholion.thluiz.com/notes/dangers-of-session-hijacking-railscasts/Shows how a session cookie exposed over HTTP can be stolen and replayed, then explains Rails protections with force_ssl and a separate secure signed cookie for HTTPS requests.