Testing & RemediationHow to test: Begin a workflow on your site (filling out a form, starting a purchase, etc) and ensure that users are warned about timeouts due to inactivity. How to remediate:
- Setting a session timeout to occur following at least 20 hours of inactivity.
- Store user data for more than 20 hours.
- Provide a warning of the duration of user inactivity at the start of a process.