Hi, A recent pen test brought up the lack of inactivity session timeout in Liquidfiles. I understand from previous requests that this may be difficult to implement due to the architecture used. Would it be possible to implement an inactivity session timeout in a manner like this?... Heartbeat polling runs the in background keeping the session alive and user remaining logged in. If an upload is running then you already know that on the page so can pass through that information as part of the heartbeat so that a session timeout is never reached. Once the heart beats no longer include that a file upload is in progress then the time since last activity should be used to calculate if the inactivity session timer has been reached. If it has then the page should be redirected to the logout page and the session ended. Thanks.
