Settings and activity
4 results found
-
1,057 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…John Harris supported this idea ·
-
29 votes
John Harris supported this idea ·
-
342 votes
Hi everyone, to front foot some of the recent comments we will not be bringing back classic invoicing. With developments continuing within new invoicing, we do want to let you know that our product teams are highly engaged with your feedback and the ideas for new invoicing on the site.
We understand there's good interest in being able to add a payment directly from the invoice screen and appreciate the efficiencies expressed by customers in being able to do this. At present we're reviewing this feature and will move the idea across to Under Review. I'll be back to share more on the outcomes. Thanks
John Harris supported this idea ·
-
8 votes
John Harris supported this idea ·