Back button after logout in Chrome will display user-specific information


We noticed that if a user is accessing Confluence in Chrome, when he/she logs out and then hits the back button, information specific to that user is still displayed. Technically, the session appears to be destroyed, since clicking on anything of that user-specific information will redirect to the login screen. However, since user-specific information is still displayed, we experience this as a security issue. Our clients are working in situations where multiple users are accessing the same physical machine (PC) and make use of Confluence in consequent turns. If user 2 hits the back button after user 1 (thought he) logged out, user 2 will be able to see information that was meant for user 1.

This is only happening in Chrome (26) and not in IE or Firefox (any version). The version of Confluence that we're using is 4.3.7, but it happens in earlier versions as well. Reproducing the issue is easy: log in to Confluence in Chrome, log out and hit the back button.

Can anyone suggest a way to prevent this 'back button' view on the previous session in Confluence?

Thanks in advance!

4 answers

I've just tested this and what I see is the page I had open when I logged out. If i try to navigate to any page from that one, I'm shown the login screen.

We're using 4.3.7.

Hoi Jurrian,

Ik ben verhuisd naar Engeland. Nou werk ij voor Jagex, met he documentatie in Confluence. Morgen ga ik naar London vor mijn eerste UG onmoeting. :)

Ik hope dat alles good met jullie is.

Hi Mick,

Nice to hear from you! So, you're confirming our finding. Our issue is that Chrome should not allow user 2 to review the page you had opened when you logged out as user 1, but instead redirect you to the login page, as IE and Firefox do. Looking forward to a possible solution!

Anyone? Any help would be greatly appreciated!

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Dec 18, 2018 in Confluence Cloud

Happy holidays from our team to yours!

Hi Community!  2018 was filled with changes for our team, both big and small, and we've taken a lot of time to both celebrate our wins and recognize areas of improvement. One thing that we're a...

479 views 3 18
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you