Hi,
Our customer made a penetration test and reported the issue below. is it a problem or not? If yes, how can we avoid it?
wss://…com/x/app.wx
Request:
{“events”:[{“id”:”id_13″,”type”:”touch.move”,”args”:{“Data”:{“touches”:[{“screenX”:509,”screenY”:900}],”multiTouch”:false},”button”:-
1,”y”:900,”x”:509,”modifiers”:0}},{“id”:”id_13″,”type”:”mousemove”,”args”:{“button”:0,”modifiers”:0,”y”:900,”x”:509}},{“id”:”id_13″,”type”:”mouseout”,”args”:{“button”:0,”mo
difiers”:0,”y”:37,”x”:1449}}],”type”:2,”sisd”:”zlnwq4eird4c4srmvkrpnnkg”}
Response:
[{“type”:11,”data”:{“message”:”Invalid session.”,”stackTrace”:” at Wisej.Core.ResponseManager.ValidateApplication(Session session, ServiceType service)\r\n at
Wisej.Core.ResponseManager.ProcessRequest(ServiceType service, Object message)”,”exception”:”System.ApplicationException”,”invalidSession”:true}}]
They reported this exception only, but treated it as a general problem.
Regards,