📦 Turbo

A race condition in Hotwired Turbo's turbo-frame element handler allows logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote att...