Settings and activity
3 results found
-
111 votes
Thanks for the added detail, everyone. It's good to be able to share this detail back with our teams.
Appreciate why Bank Rules won't help for cash accounts and where you don't have a bank feed coming into the account.
Being open, this isn't something we have plans for changing in the short-term. We'll leave the idea open for our product team to continue considering how we could improve efficiency in some of the situations you've described. If there are any updates we'll share this with you all here.
Mike Knobloch supported this idea ·
-
1,067 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…Mike Knobloch supported this idea ·
An error occurred while saving the comment -
111 votes
Mike Knobloch supported this idea ·
I find this extremely frustrating - especially if I have several windows open at the same time.