-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Summary
After logout, pressing the browser Back button lets the user see/access the dashboard. Session should remain logged out.
Environment
- Windows 11 • Firefox
- Test data: Admin / admin123
Steps to Reproduce
- Login as Admin / admin123
- Open user menu → Logout
- Press browser Back
Expected
Remain on Login; dashboard and user menu are not accessible.
Actual
Back shows the user menu / dashboard (accessible).
Evidence (screens)
- https://github.com/cesartau/Qa-portfolio/blob/main/manual/login/evidence/TC-014_state-trantition_Defect_2025-08-25.png
- https://github.com/cesartau/Qa-portfolio/blob/main/manual/login/evidence/TC-014_state-trantition_Defect_2_2025-08-25.png
Related repo notes
- Defect write-up: /manual/login/defects/DEF-014_logout_back.md
Severity / Priority
- Severity: Medium (security/usability)
- Priority: High (bypass after logout)